Legal & governance
Security
How we protect client engineering data, aligned to ISO/IEC 27001.
Information classification
Every RFQ is classified Public, Internal, Confidential, Client Confidential or Critical Infrastructure, and handling controls follow that classification.
Secure file handling
Drawings and engineering files are uploaded through one-time secure links to private storage — never sent as email attachments. Access uses short-lived signed links, requires multi-factor authentication and is recorded in a tamper-evident audit log.
Governance
We log security incidents, review staff access periodically, and test backup recovery. Our controls are aligned to ISO/IEC 27001; we will state certification only once achieved.
Last reviewed: October 2026.