Vendor, hosting and due-diligence reviews written to the standard counsel, insurers and boards expect.
Enterprise work is an independent opinion on a vendor, a hosting arrangement, a cloud architecture or a target ahead of acquisition or renewal. The reader is often counsel, an insurer, a board or a counterparty who did not commission the original build.
We do not publish a client list. The work has included finance, government and aerospace environments with formal control requirements, and commercial operators that needed an outside technical opinion they could file.
Headquartered in Canada. Engagements have been delivered across North and South America, and as far as Ireland, Singapore and the Cayman Islands. The engagement model does not change with the time zone.
What the provider actually controls, what they claim, and what remains your residual risk. Questionnaires are not a substitute for looking at the deployment.
Identity, network boundaries, logging, backup and who can change production. Virtualization and multi-tenant hosting included when named.
Ahead of acquisition, renewal or a material contract. Scope is written so the opinion cannot be read as a certification of the whole business.
An introductory meeting comes first. Access, interviews and documents are named in writing. A named analyst is accountable for the findings. Client material is never used to train or tune a model.
Related work: consulting when you already know the question; site security for a property; backup and recovery when restore proof is the issue.
What you receive
Describe the system, vendor or AI deployment under consideration. We respond with the proposed scope, timeline and fee.