Our security
We hold ourselves to what we sell you.
Whether you send us a passport scan or hand us your Microsoft 365, the standard is the same. Here is how we work so that we are not the weak link.
Digital & application clients
Your documents
Passports, IDs, financial paperwork and application files are sensitive. They are handled deliberately, and no longer than needed.
Secure sharing
Identity documents and financial paperwork go through a secure upload channel — not ordinary email or messaging apps.
Minimum necessary
We collect only what a task needs, and only for as long as it needs it.
Retention limits
Documents are deleted on a schedule you agree to when the work is done.
We never keep
Your passwords, recovery codes, or original identity documents.
Recorded consent
What we hold and why is recorded and available to you.
IT clients
Access to your systems
When we administer your environment, access is scoped, logged, and reversible — and you always keep ownership.
You own your tenant
Your Microsoft 365 tenant is yours. We do not hold it hostage.
Least-privilege, time-bound access
We administer your environment through Granular Delegated Admin Privileges (GDAP) with only the roles the work needs, renewed on a schedule — not a permanent global-admin login.
Documented break-glass
Each client has one emergency administrator account, protected with MFA, stored in your vault, monitored, and used only in a genuine emergency.
Clean offboarding
If you leave, we have a written process to return or destroy your data, remove our agents, and rotate any shared secrets.
Our own house
A managed provider is a target the moment it has two clients.
Insurance: Redoubt Technology LLC carries general liability, technology errors & omissions, and cyber-liability coverage. Certificates are available to clients on request.
Report a concern: [email protected] — acknowledged within one business day.
- MFA on every account we operate, with hardware security keys on the critical ones.
- A dedicated, hardened workstation for client administration — separate from everyday browsing.
- Endpoint detection and response running on our own devices.
- Full-disk encryption, automatic screen lock, and no shared credentials internally.
- Our documentation and business records are backed up off-site, and the restore is tested.
- A written incident response plan for our own business, not just yours.
Get started
Tell us what you need. We’ll tell you exactly how it works.
Book a short consultation. We walk through the service, what we need from you, the price and the timeline — with no obligation.