Security and compliance, stated plainly.
How we protect your data, who we place, and exactly where we are on compliance: no overstated claims.
How we protect your business
Data handling
Client data stays in your systems wherever possible. Named accounts, no local copies, no public AI tools with your data unless you approve in writing.
Background checks
With the candidate's written consent: government ID verification, NBI clearance and at least two references. See how we vet.
Device & access policy
Supported OS with updates, disk encryption, screen lock and endpoint protection. Least-privilege access, MFA everywhere, password manager, same-day offboarding.
NDAs & confidentiality
Every assistant signs confidentiality and data-privacy agreements before access. Client agreements include confidentiality terms and a Data Processing Addendum.
HIPAA BAA available
For medical administrative roles we sign a Business Associate Agreement before any PHI access. Non-clinical work only.
SOC 2: on our roadmap
We do not hold SOC 2 or ISO 27001 certification today and don't claim to. SOC 2 readiness is on our roadmap; we'll update this page if an independent audit is completed.
Agreements we can provide
Available during contracting. Ask on your fit call.
- Master Services Agreement and Order Form
- Data Processing Addendum
- HIPAA Business Associate Agreement (medical admin roles)
- Bookkeeping Services Addendum
- Completed security questionnaire on request
Frameworks we draw on: the NIST Cybersecurity Framework and the Philippine Data Privacy Act of 2012.
Trust FAQ
Are you SOC 2 certified?
No. We do not hold SOC 2 or ISO 27001 today. SOC 2 readiness is on our roadmap, and we'll complete your security questionnaire honestly.
Will you sign our NDA?
Yes, in most cases, alongside our standard confidentiality terms.
Do you sign BAAs?
Yes, for medical administrative placements, before any access to protected health information.
How do I report a security concern?
Email [email protected] with 'Security' in the subject line.
Bring your security questionnaire.
Book a call and we'll walk through every control.