Security Policy

Security is foundational to how IntelliOpsAI operates. We design, build and advise on enterprise AI systems that hold client trust as a first-class requirement, and we apply the same standards to our own internal operations, communications and infrastructure.

We minimise the data we collect, restrict access to what is necessary for a defined purpose and treat client information as strictly confidential. During engagements we align our data-handling practices with the client's own information security programme and any applicable regulatory requirements.

Data in transit across our website and business systems is protected using industry-standard TLS. Where we store engagement material, we use encrypted storage provided by trusted enterprise platforms and cloud providers, with keys managed by those platforms in line with their published security controls.

Our website and internal tooling run on established enterprise cloud and SaaS platforms selected for their security posture. We rely on managed platforms for identity, email, collaboration, storage and workflow, benefiting from their continuous investment in physical security, network security and platform hardening.

• Principle of least privilege — access is granted only to what a role requires.
• Multi-factor authentication on business-critical systems and administrator accounts.
• Regular access reviews for internal tools and client environments we are authorised to touch.
• Prompt revocation of access when roles change or engagements end.

We rely on platform-native logging, alerting and monitoring provided by our cloud and SaaS providers, supplemented by our own operational reviews. Anomalies affecting the availability, integrity or confidentiality of information are investigated and addressed on priority.

IntelliOpsAI maintains an internal incident response process covering detection, triage, containment, remediation and communication. In the event of a confirmed security incident affecting client information, we notify affected clients in line with contractual and legal obligations and work with them to coordinate response.

We keep our website dependencies and internal tooling up to date, monitor for known vulnerabilities and prioritise remediation based on severity and exposure. For solutions we deliver to clients, we follow secure development practices and align with the client's own vulnerability management standards.

We appreciate the work of the security research community. If you believe you have discovered a vulnerability affecting IntelliOpsAI, please report it privately using the contact below. Please avoid actions that would degrade service, access data that is not your own or violate the privacy of others. We will acknowledge legitimate reports, investigate and follow up with a response.

To report a security concern or ask a question about our security practices, contact hello@intelliopsai.in with "Security Enquiry" in the subject line, or use our Privacy & Compliance page.