Work with ussales@7knotsdigital.com
Contact Us347-349-0919
7 Knots Digital maintains a strong security posture centered on integrity, data protection, and operational resilience. Security controls, access policies, and proactive monitoring are implemented to safeguard client data and uphold confidentiality in accordance with industry best practices. Our technology infrastructure is managed internally with support from approved third-party providers. All operations are conducted in compliance with relevant data protection laws and contractual obligations.
Our infrastructure is hosted on Google Workspace and Google Cloud (including Google Cloud Storage). Access to production environments is protected through role-based permissions and multi-factor authentication (MFA).
All company-managed systems receive regular operating system and security updates. Patch schedules are centrally managed and enforced via JumpCloud to ensure timely updates without service interruption.
Backups are automated and managed through the Google Admin console, leveraging Google Workspace’s native backup, versioning, and recovery capabilities. Data integrity checks and redundancy protocols are in place.
7 Knots Digital has documented disaster recovery and business continuity plans that are reviewed bi-annually. Google Workspace and Google Cloud Storage are leveraged for data redundancy and rapid recovery.
We maintain internal documentation outlining our security, privacy, and operational protocols. These include change management procedures, access reviews, security training, and incident handling workflows.
Strong password requirements are enforced organization-wide. Passwords are subject to complexity rules and expiration policies. Password management is centrally enforced.
Sensitive information is transferred using encrypted channels including Secure FTP (SFTP), HTTPS, and SSL-protected APIs. Sensitive attachments are encrypted before transmission.
All company email is hosted on Google Workspace (Business Plus) with TLS 1.2 encryption and MFA. Google Vault is used for audit, eDiscovery, and long-term email and data retention. Malwarebytes provides endpoint threat protection.
All workstations are protected by antivirus and endpoint detection software (Malwarebytes). Device compliance — including disk encryption, patch status, and automatic lockout policies — is centrally enforced and monitored through JumpCloud as our mobile device management (MDM) platform. Google Workspace Business Plus advanced endpoint management additionally gates account access, enforcing encryption and compliance status before a device can reach Workspace, Gmail, or Drive. Employees also access company systems via Azure Virtual Desktop (AVD) for select remote/virtual desktop sessions.
Client data is logically segmented, and access is restricted based on role. Sensitive data access is monitored and reviewed quarterly. Secrets are managed in 1Password, with a dedicated vault maintained per client to segregate credentials and limit cross-client access. Data Loss Prevention (DLP) policies, enabled via Google Workspace Business Plus, scan and restrict unauthorized sharing of sensitive content across Gmail and Drive.
Security practices are audited both internally and via third-party assessments. Malwarebytes provides endpoint-level threat detection, JumpCloud Directory Insights provides centralized logging and review of identity and device events (logins, admin changes, device compliance status) across the organization, and KnowBe4 reports provide visibility into phishing susceptibility and user behavior. Regular penetration testing and ethical hacking reviews are conducted by security consultants.
Incident Response Procedures
Our incident response plan includes:
All employees sign data security agreements. Access is revoked immediately upon separation. HR and payroll operations are managed through ADP TotalSource, which provides secure employee record handling, background checks, and compliance alignment across HR processes. Regular KnowBe4 training is delivered to educate staff on threats including phishing and social engineering.
A designated team member is responsible for vetting third-party vendors and subcontractors. Contracts include data protection clauses and require vendors to implement adequate security controls. Regular reviews and access checks are performed.
We implement security controls aligned with Google Cloud best practices:
7 Knots Digital adheres to applicable requirements of GDPR, HIPAA, and ISO 27001 when relevant to client contracts. Logging is enabled across services, and audits are conducted at least annually. Quarterly internal reviews and external audits are performed as required. While 7 Knots Digital is not currently SOC 2 or ISO 27001 certified, our controls align closely with these standards, and third-party penetration tests and ethical hacking reviews are performed annually.
We have a formal change management policy that ensures all changes to production systems or processes are reviewed, documented, and approved by designated personnel. Changes are tracked through version control and cloud audit logs.
Security awareness is embedded into our operations through quarterly training, simulated phishing tests, and incident-based reviews. Employees are trained to escalate suspicious activity.
Security and privacy measures are regularly assessed. Feedback from audits, incidents, and client requirements are incorporated into revised controls. Our Cloud Security & Governance Policy is reviewed bi-annually.
We are committed to maintaining transparency and continuous improvement in all aspects of data protection. 7 Knots Digital does not offer a downloadable software product. All services are cloud-based and managed by our internal team. Should you require further documentation, audit summaries, or references to our operational policies, we are happy to provide them under NDA or as part of due diligence.
Work with ussales@7knotsdigital.com
Contact Us347-349-0919