Trust is part of the service boundary: responsible information handling, controlled access and clear operational responsibility.
01 / COMMITMENT
We treat responsible information handling, reliable operation and transparent boundaries as part of every engagement.
Handle information responsibly.
0102 / CONFIDENTIALITY
Processes, SOPs, commercial information, credentials and other non-public material are handled only as needed for agreed work.
Protect confidential business context.
0203 / MINIMISATION
We request only necessary information and limit access to the people responsible for delivering the work.
Request less. Limit access.
0304 / SECURITY
Where included in the service, this can cover sensible hardening, HTTPS, dependency maintenance, access controls, backups, monitoring and controlled changes.
Apply practical service security.
0405 / BOUNDARIES
We distinguish XpSys responsibilities from client and third-party platform responsibilities so the service boundary remains understandable.
Name responsibilities clearly.
0506 / COMMUNICATION
Material service issues and planned changes are handled through clear communication within the agreed engagement.
Communicate important changes.
0607 / LEGAL
Our public legal pages explain how website information is handled and how to raise accessibility or general enquiries.
Build for the operation, not the presentation.
Discuss security requirements