Policy
Security & compliance policy
What we commit to for buyer data, how we notify on incidents, who processes data, and the certifications we do not claim.
Scope
This page is the policy statement for buyers and procurement teams: what Big Sky Dynamics commits to for the data you give us, how we notify you if something goes wrong, and what we will and will not claim about certifications. The technical controls are described on the security & compliance page.
Access and data controls
- Administrative access to our systems requires multi-factor authentication and role-based permissions on least-privilege.
- Data in transit is encrypted with TLS. Data at rest in our systems is encrypted with AES-256.
- Access to buyer order data is limited to the people who need it to quote, fulfil, invoice or support the order.
- We do not use buyer data to train AI models, and we do not sell it.
- Backups are encrypted and access to them is restricted to the same administrative roles.
Incident notification
If we confirm a security incident that affects buyer data, we notify affected buyers without undue delay and tell you what we know: what happened, what data was involved, what we have done to contain it, and what we recommend you do. We do not wait for a complete root-cause report to make the first notification, and we follow up when the investigation is complete.
Report a suspected issue to [email protected] with the subject line Security.
Who processes data
We use a small number of service providers to run the business and fulfil orders. Categories are:
- Hosting and content delivery for this site
- Email and collaboration for correspondence
- Authorised US distributors and freight carriers, for order fulfilment and delivery
- Banking and payment processing for remittance
- Accounting and professional advisers, where required by law or contract
We share only the data needed for the relevant task and require providers to protect it. Ask us for the current supplier list under NDA if your procurement process needs it.
Certifications we do and do not claim
Security reviews and questionnaires
We complete buyer security questionnaires and provide current evidence for live opportunities: our security overview, insurance certificates, W-9 and tax documentation, and a completed questionnaire in your format where one is required. Send the questionnaire and the date you need it back to [email protected].
Contact
Security and compliance questions: [email protected] or +1 307-207-0033, Monday to Friday, 8am–6pm ET.
Services & programs