Trust & data handling
Fortentra is an identity, PAM and AI-security consultancy. This page explains the practical safeguards around enquiries, client information and the services that support our work—without claiming certifications or capabilities we do not have.
Our approach
We use proportionate security and privacy controls based on the information involved, the work being delivered and the client’s requirements. Secure collaboration methods, access arrangements and evidence handling are agreed when an engagement requires them.
We describe current practices honestly. Fortentra does not currently claim ISO 27001, SOC 2 or another independent organisational security certification.
Data handling
The website records information a visitor chooses to submit, including contact details, enquiry content, consent and regional preference. During consultancy engagements, the information required and its permitted use should be agreed with the client.
Client secrets, credentials and confidential engagement material are not intentionally submitted to AI or search providers unless the client has authorised that use and appropriate safeguards have been agreed. See our privacy policy for website-specific details.
Service providers
Website hosting and email delivery support normal operation. AI generation, external search and CRM or webhook integrations are optional and only operate when configured. The organisations used, hosting locations and contractual safeguards depend on the production deployment and the needs of an engagement.
We do not embed third-party advertising or behavioural analytics. Website measurement is designed to avoid cookies, IP-address storage, device fingerprints and persistent visitor identifiers.
Reporting concerns
Potential vulnerabilities can be reported through our responsible disclosure process or machine-readable security.txt. Privacy questions and concerns can be sent through the contact form.
Reports are assessed, contained and resolved according to their nature and impact. Fortentra does not represent this as a staffed 24/7 monitoring or incident-response service.