SECURITY AND DATA HANDLING
Your documents are the business. We treat them that way.
Plain-language answers to the first questions your security and procurement teams will ask. If you need something not covered here, ask and we will send it.
Hosting
Data is processed and stored on Microsoft Azure in United States data centers. Customer documents are not moved outside that environment.
Encryption
TLS 1.2 or higher in transit. AES-256 at rest for documents, extracted data and backups.
Access control
Role-based access, least privilege, multi-factor authentication for all CelerOps staff. Access is logged.
Retention and deletion
Documents are retained for the period you set. Deletion requests are completed within 30 days and confirmed in writing.
Subprocessors
A current list of subprocessors is available on request and updated before any change.
Incident response
Security concerns go to security@celerops.com. Confirmed incidents affecting your data are reported within 72 hours.
Vendor reviews. We complete vendor security questionnaires on request and can walk your team through our controls before any engagement.
Have a security questionnaire?
Send it over. We usually return completed questionnaires within five business days.