Security

This page describes how PeopleTeam.IO protects client information today. It describes what we do, not certifications. When our practices change, this page changes with them.

How we access your Workday

• We work on accounts you create, grant and control. We never use credentials of our own, and never use access you haven't set up.

• We ask for the least access the work needs, and we agree it in writing before we start.

• You can review, reduce or switch off our access at any time, without asking us.

What we keep, and for how long

We keep only what the work needs. When an engagement ends, we delete anything we hold that contains sensitive, confidential or personal data.

What we keep afterwards is our own working knowledge: how we approached a problem, and the methods we would use again. Exactly where that line sits is written into our engagement contract, so it is something you agree to rather than something you read here.

Who works on your engagement

The people who will do the work are named in the written scope, and you meet them before you sign. Nobody else is handed your work.

Our accounts and devices

• Our team signs in through a single identity provider, so access can be granted and removed in one place.

• Work is done on company-managed computers enrolled in device management.

• Passwords and other secrets are kept in a business password manager, never in documents or chat.

• Access to our internal systems runs over a private, zero-trust network.

What we ask you not to send

Please don't send employee records, passwords or other confidential information through our website or by email. If the work needs sensitive information, we agree with you how it will be shared before anything is sent.

Reporting a concern

If you think you've found a security problem with our website or our services, write to security@peopleteam.io. We'll reply and tell you what we're doing about it.