Access controls are a critical security discipline at Vortex Web Innovate, and we employ a number of restrictions to limit our potential attack surface and impact.
All individual access is granted through named accounts, and shared credentials are not permitted. All accounts have multifactor authentication enabled and utilize your identity provider for additional authorization. The principle of least privilege is the default for our production access, which is always task-scoped, time-bound, and deleted at the end of our support.
We connect to your systems via your identity provider, and our access is logged in your audit trails when available.
Access is reviewed at every point of engagement and is revoked when an individual exits it, within the window your agreement sets. We also require a formal offboarding checklist to be completed on a per-employee basis, with evidence provided upon request.
