This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.
Security
Security & Data Protection
For IT, cybersecurity, and healthcare buyers this is often the second page opened. Here is how confidentiality, access, and ownership are handled — in plain language, with no claims we cannot evidence.
Confidentiality and NDAs
We sign your NDA or provide ours before technical discussions involving your environment. Confidentiality obligations extend to every specialist assigned to the engagement, not just the contracting entity.
Scoped system access
Access to your systems and data is limited to what the engagement requires, granted in writing, tracked, and revoked at close-out. We do not request standing or administrative access without a documented reason.
IP ownership
Ownership of deliverables, documentation, code, and designs produced during an engagement is addressed in the contract before work begins — the default position is that engagement deliverables belong to the client.
Data handling
Client data stays inside client-controlled systems wherever the engagement allows. Where data must be handled by our team, storage locations, retention, and deletion are agreed in advance.
Personnel practices
Engagement teams are named, and changes to team composition are communicated rather than silently substituted.
Certifications
We make no ISO 27001, SOC 2, HIPAA, GDPR, or PCI DSS certification claims. If a formal certification is a procurement requirement, tell us early and we will be straightforward about what we do and do not hold.
Healthcare engagements
Advisory Scope, Clearly Stated
Vertex Connect provides healthcare technology and advisory services. We are not a licensed clinical or medical provider and do not deliver clinical care. Compliance support is advisory and documentation-based; clients remain responsible for their own regulatory compliance and legal review.
Next step
Need Our Security Posture in Writing?
Ask, and we'll walk your team through confidentiality, access control, and data handling for your specific engagement.