Response SLA
Leadership reply within 24 hoursDelivery Regions
USA, Spain, India, Ecuador, and global remoteEngagement Control
NDA-first, written authorization requiredControl Alignment
Mapped to SOC 2, ISO 27001, PCI DSS, HIPAAData Governance
Data retention and deletion schedule.
Updated: February 19, 2026. Contract-specific overrides apply where required by law or customer agreement.
Contact records
Retained for up to 24 months after last engagement communication.
Assessment artifacts
Retained for up to 12 months unless shorter period is agreed in SOW/DPA.
Critical escalation logs
Retained for up to 24 months for audit and assurance traceability.
Deletion requests
Processed within 30 days, except where legal obligations require retention.