Security & Privacy at Dimension Technology Solutions

Dimension Technology Solutions, Inc. (“DTS”) builds and supports software for our clients. We take the security and privacy of the information entrusted to us seriously, and this statement explains, in plain terms, how we protect it.

The information we handle

DTS is a business-to-business software development and support company. We do not operate a public, consumer-facing product that collects personal information at scale. The information we handle is:

• Business contact information — details you provide when you contact us or that we exchange with clients, vendors, and partners in the course of business.
• Client information we access to deliver services — our clients host their own data in their own environments; when our work requires access to that data, we handle it under contract and only as needed to provide the service.

How we protect it

• Strong access controls — multi-factor authentication is required across our business accounts, access is granted on a least-privilege basis, and access is reviewed periodically and promptly removed when no longer needed.
• Encryption — company devices are full-disk encrypted, and data is protected in transit and at rest using industry-standard encryption.
• Secure development — changes to software are reviewed and approved through a documented change-management process before release.
• Vendor diligence — we rely on established providers (Microsoft Azure, Microsoft 365, and Atlassian) and review their security and compliance posture.
• Incident response — we maintain an incident response plan with defined procedures for detecting, handling, and — where required — notifying affected parties and authorities of security incidents.
• Independent assurance — DTS's security program is built to the AICPA SOC 2 Trust Services Criteria, and a SOC 2 Type I examination is in progress with a licensed CPA firm.

Client data

Our clients own their data. When we access client data to provide services, we protect it under the terms of our client agreements and confidentiality obligations, handle it according to our internal data-classification standards, and do not sell it or use it for any purpose other than delivering the agreed services.

Website information

If you contact us through our website or by email, we use the information you provide solely to respond to your inquiry and to conduct our business relationship. We do not sell personal information. We retain it only as long as needed for those purposes and in line with our records-retention practices.

Contacting us

If you have a security or privacy question, or wish to report a concern, please contact us at ryan.morgan@dts-global.com, Dimension Technology Solutions, Inc., 7931 S Broadway, Littleton, CO 80122.

Updates

We may update this statement as our practices evolve. The effective date above reflects the current version.