Data minimization
Collect only what is needed to deliver the service.
Security and confidentiality
Minimize data. Limit access. Document accountability.
DefenderTech separates the public website from authorized support systems and avoids collecting client content when it is not needed.
Operating principles
Security built into the way support works
Authorization
Confirm who is requesting support and what access is approved.
No password collection
Users enter their own credentials whenever possible.
Attended access
The user authorizes and observes remote support sessions.
System separation
The public site routes sensitive actions to authorized portals.
Limited retention
Retain records according to contract, need, and applicable obligations.
Access controls
MFA, roles, managed devices, and separated accounts.
Incident response
Escalate security concerns according to the agreed plan.
Before the first session
Contractual and operational controls
- Master services agreement
- Scope or statement of work
- Confidentiality agreement
- Security and data-processing addendum
- Remote support authorization
- Contact and escalation matrix
- Retention and deletion policy
- Incident procedure
Keep out of public intake
Sensitive or privileged content
- Case facts or strategy
- Discovery or evidence
- Client or witness information
- Social Security numbers
- Medical information
- Criminal-history information
- Passwords or MFA codes
- Privileged communications
DefenderTech provides technology support and operational consulting for businesses, nonprofits, and legal professionals. It is not a law firm and does not provide legal advice or legal representation. Final safeguards should be reviewed by the client’s legal, privacy, security, and procurement advisors.