Security

Trustalis is a consulting firm. This page describes how we handle information you share with us during inquiries and engagements. This website does not offer accounts or logins.

This is a static website. It has no user accounts, does not store form submissions, and does not use advertising or tracking cookies. The contact form opens an email in your own mail app rather than sending data to a server we operate. The site is hosted on Cloudflare Pages.

• —We request only the information needed for the agreed scope.
• —Information is shared through methods agreed with you at the start of an engagement; where possible we work inside your environment and tools rather than copying data out.
• —Access is limited to the people performing the engagement.
• —Confidentiality terms are set in the engagement agreement or NDA.

Please do not send confidential evidence, credentials, regulated data, or cardholder data through email or the contact form. If an engagement requires sensitive material, we agree on a secure transfer method, retention period, and return or destruction process in advance.

Engagement materials are retained only as long as needed for the engagement and any obligations in the agreement, then returned or securely deleted as agreed. Specific retention terms are confirmed in each engagement agreement.

We use a limited number of business service providers, such as email, document storage, and website hosting. The providers relevant to an engagement can be disclosed during contracting. A provider's certifications are the provider's own and are not certifications of Trustalis.

Trustalis provides advisory, readiness, and assessment support. We do not issue certifications or perform accredited certification audits. PCI DSS Reports on Compliance are issued only under a PCI SSC-approved QSA company, and CMMC certification assessments are performed by authorized C3PAOs.

If you believe you have found a security issue with this website, or have a security question about working with us, contact [email protected].