Last updated 7 November 2026
We would rather tell you what we have not done than let a certification badge imply something untrue. We have not been SOC 2 audited. Everything else on this page is what we do.
Repositories, cloud accounts, domains, developer accounts and documentation are created in your name from day one, not ours and migrated later. If our working relationship ends, nothing has to be handed over because nothing was ever held hostage.
Access to a client environment is limited to the people working on that engagement and is removed when they stop. We use multi-factor authentication on accounts that support it, and we prefer your SSO when you have one.
We do not ask for a shared admin password. If you offer one, we will ask for a named account instead.
Secrets stay out of source control. Dependencies are kept current and reviewed when advisories appear. Changes go through review before they reach production. Test data is synthetic or anonymised rather than a copy of your live database.
We build with HIPAA-aware practices for healthcare work, including the behavioral health intake platform we delivered for a four-location practice. That means minimum necessary access, encryption in transit and at rest, audit logging, and a Business Associate Agreement where one is required.
We will sign an NDA before the first call if you need one.
Being straight about this matters more than looking certified:
If your procurement process requires any of these, tell us early and we will say plainly whether we can meet it rather than finding out at the final stage.
This site is static HTML served over TLS. It sets no cookies, runs no analytics and stores nothing in your browser. There is no database behind it and no user accounts to compromise. See the Privacy Policy for what that means for your data.
If you have found a security problem in this site or in something we built, email contact@datarector.com with enough detail to reproduce it. We will acknowledge within three working days and keep you updated until it is resolved. We will not pursue anyone who reports a genuine issue in good faith and gives us reasonable time to fix it before disclosing it.
Questions about this page? Write to contact@datarector.com or call +1 561 223 9289. By post: DataRector, 1391 Hempstead Turnpike, Elmont, NY 11003, United States.