Data Security Policy

1. Access Control

• Access to client systems is limited to team members who need it for their role.
• Multi-factor authentication and password managers are required for shared platforms.
• Access is reviewed and revoked promptly when a role changes or an engagement ends.

2. Encryption & Infrastructure

Data is transmitted over TLS and stored with reputable cloud providers that encrypt data at rest. Production credentials are stored in secret managers, never in code, documents, or chat.

3. Vendor Management

We use established platforms for CRM, hosting, analytics, payments, and AI services. We review vendor security posture before adoption and limit the data each vendor receives to what the integration requires.

4. Retention & Deletion

• We retain client and candidate data only as long as needed for the engagement or as required by law.
• On written request after an engagement ends, we will delete or return client data, excluding records we must retain for tax, legal, or dispute purposes.

5. Incident Response

If we become aware of a security incident affecting your data, we will investigate, contain the issue, and notify affected clients without undue delay with the facts known at that time and the steps we are taking.

6. Your Responsibilities

Clients are responsible for safeguarding their own credentials, promptly removing former employees from shared systems, and reporting suspected compromise to support@leoserv.com.

7. Changes to This Policy

We may update this policy as our services, vendors, or legal obligations change. When we do, we revise the Last Updated date above and post the current version on this page. Material changes affecting active engagements are communicated by email to the primary contact on the account.

Continued use of our website, systems, or services after an update constitutes acceptance of the revised policy.

8. Governing Law

This policy is governed by the laws of the State of Texas, without regard to conflict-of-law principles. Any dispute arising from this policy is subject to the exclusive jurisdiction of the state and federal courts located in Montgomery County, Texas.

9. Contact Us

Questions about this policy? Email support@leoserv.com, call +1 (877) 778-2970, or visit our contact page.