Compliance & Certifications
We would rather be accurate than impressive. This page states plainly what is in place today and what is still in progress.
Current status
Our formal compliance program is in progress. We do not currently claim SOC 2, ISO 27001, GDPR, or HIPAA certification, and we will only publish a certification once it has been independently awarded. If a badge or certification is not shown on this page, we do not hold it.
Security practices in place
- Encryption in transit and at rest for data we hold.
- Multi-factor authentication and least-privilege access for our systems.
- Idle-session timeouts and access logging.
- Secrets and credentials stored in a secrets manager, never in client-facing code.
- Consent recorded for any remote-support session, with an audit trail.
Data protection
We handle personal data in line with our Privacy Policy and, for business clients, a Data Processing Agreement. We apply data-minimization: we collect only what a matter requires, and we retain it only as long as needed.
Requesting compliance details
Enterprise clients can request our current security overview, subprocessor list, and a signed Data Processing Agreement. Contact support@cyberphoenixscamdefense.com and we will share what is available under NDA.
Questions about this policy?
Contact support@cyberphoenixscamdefense.com. This policy applies to Cyberphoenix LLC, operating cyberphoenixscamdefense.com. Only trust contact details published on this official website.
// More policies
Related legal & trust pages
Every commitment we make is written down and cross-linked. Read how the rest of the program protects you.
Privacy Policy
What we collect, how we use it, and the rights you have over your data.
Terms of Service
The terms that govern your use of our website and services.
Remote Support Consent
How a genuine, consent-based support session works — and how to spot a fake.
No Cold-Call Policy
Exactly how we do and do not contact people, so impersonation is easy to spot.
Refund & Cancellation
How cancellations, retainers, and refunds are handled.
Recovery Disclaimer
An honest account of what recovery work can and cannot achieve.
Data Processing (DPA)
How we process personal data on behalf of business clients.