Your systems, your accounts, your switch.
We can only build around how you operate if we can see it. Here is exactly how access works, and how you stay in control of it.
One account, on your domain
Everything is granted to a single integrations account that you create on your own domain. You can see what it can reach, and switch it off at any time in one place.
Nothing changes without you
During the Review we look, we do not touch. Anything that changes your systems is tied to a specific phase you have approved, and can be undone.
Minimum necessary
We request only what a finding or phase needs. Personal and patient details are counted and summarized, not copied out of your systems.
Health data
For healthcare clients we sign a Business Associate Agreement, and work involving protected health information runs inside your covered cloud.
Secrets stay secret
Keys and passwords are never stored in code, documents or chat. Each client has its own isolated code, hosting and records.
You own it
Your platform lives in accounts you own. If we ever part ways, everything stays with you.
Questions
Your IT lead, accountant or compliance officer is welcome on any call. Write to security@tengears.com and we will send our data-handling summary and agreements before any access is granted.