Skip to content

Trust Center

Security and procurement, plainly.

Security and procurement teams ask good questions about on-site vendors. This page answers them as plainly as it can. It describes how Deploris works, and it tells you what to ask for and what to have written into your scope.

Last reviewed October 27, 2026.

Quick answer

What can I rely on?

Deploris handles security and procurement through written scope, named and pre-registered engineers, customer-controlled approvals and evidence for every job. This site lists no company certification such as ISO 27001 or SOC 2. Tell us exactly which documents your procurement team needs, and we will say what is available and what is not.

We state what is established and we do not claim more. This site does not list a company-level certification or attestation. If your process requires one, ask early so we can tell you what exists today and what does not.

This page will be updated as documents become available.

How do access and authorization work?

Access and authorization are agreed in writing before any engineer goes on site. You name the people who can request and approve work. Engineers are nominated per site and registered with each building or facility in advance.

Many facilities require named visitors, photo ID, advance notice or a ticket in the operator's own portal. We record each site's rules in an access plan and test out-of-hours entry before it is needed.

  • A list of authorized requesters and approvers, agreed in the scope
  • Named engineers registered with each site before the visit
  • An access plan per site covering ID, escort, badge and notice rules
  • A test request outside business hours for critical sites

How are scope and changes controlled?

Every engagement starts with a written scope. It lists the tasks, the sites, the exclusions and the dependencies. Engineers act within that scope and nowhere else.

If the work needs to change, the change goes to your authorized requester and is agreed in writing before anyone acts on it. A do-not-touch list for sensitive devices can be part of the scope.

  • Tasks, sites and exclusions written down before work starts
  • A do-not-touch list for devices such as core switches and storage controllers
  • Changes approved by a named person before they are carried out
  • Work that needs a change window marked as such in the scope

How is data handled on site, including photos?

Engineers work under least privilege inside your tools and rules, and they act only on written instructions. They do not copy or store your data locally. Where your policy restricts what can be written in a ticket, notes refer to sensitive detail by reference.

Photos are part of the evidence for each job. Many facilities restrict photography to your own rack or cage, so we check the policy per site and keep other tenants' equipment out of frame. You can set areas that must stay out of any photo.

  • Your data handling policy attached to the scope where you have one
  • No credentials or secrets written in work notes
  • Photo rules agreed per site, including frames that must be avoided
  • A delivery channel you choose for photos, such as ticket attachment or email

How are drives, tapes and failed parts handled?

Media is handled under your policy, and each item is tracked by serial number. Your policy decides whether a failed drive stays on site, returns to the vendor or goes to a destruction partner. We do not decide disposition ourselves.

Deploris hands media to the vendor you approve for destruction or sanitization. We do not certify sanitization ourselves. The vendor you choose provides the certificate, and it can be linked to the custody record.

  • A custody log with serial numbers and handoff times
  • Identifier checks against your instruction before anything is removed
  • Sealed and labeled containers where your policy requires them
  • Courier or storage receipts attached to the ticket
  • Optional live video supervision where the facility allows it

Who are the engineers, and do you use subcontractors?

Deploris coordinates a network of independent field engineers and specialist partners. We do not run a regional office in every city. That means the person on site is usually a local contractor working to a brief from your engagement manager.

Our site describes the engineers as vetted and background-checked. If your policy sets specific requirements, ask for them to be written into the scope. Useful points to settle include what the background check covers, the country it applies to, and how recently it was done.

  • A project-specific brief for each engineer before dispatch
  • A named engagement manager responsible for the roster
  • Your own requirements for vetting, ID and conduct written into the scope
  • A statement of whether subcontractors may be used and how you are told

How are incidents and escalations handled?

Incidents follow an escalation path that is written into the scope before the first visit. It names the contacts on both sides and the phone number or bridge to use for urgent issues. The engineer stays in touch with your team during the work.

If something goes wrong on site, such as damage, a wrong action or a security concern, the engineer reports it to the escalation contacts straight away. Ask us to write down who is told, how fast, and in what format. We have not published an incident response time on this site, so agree one in the scope if you need it.

  • Named escalation contacts for both sides, with phone and email
  • A live bridge for urgent work
  • Written exclusions and dependencies, such as facility access delays
  • Your required notification steps for any security incident

Which documents do procurement teams usually ask for?

Procurement teams usually ask for company details, insurance certificates, a confidentiality agreement, a data processing agreement, a security questionnaire response and references to policies. List the ones you need at the start.

Our legal name is Deploris LLC, registered in the State of Colorado, USA. Our Terms of Service say that engagements are governed by separate service agreements or statements of work signed with the client. Our About page says we can execute NDAs, DPAs and site-specific security protocols as the scope requires.

  • Company registration details
  • Certificate of insurance
  • Non-disclosure agreement
  • Data processing agreement, where personal data is involved
  • Security questionnaire response
  • Site-specific security protocols
  • Master services agreement or statement of work

Does Deploris hold security certifications?

No company-level certification or attestation is listed on this site. That includes ISO 27001, SOC 2 and similar frameworks. We will not imply one.

Some engineers hold individual industry credentials, which is described on our engineer network page. That is different from a certification of the company's own controls. If your buyers require a specific framework, tell us which one and we will say plainly whether we can meet it.

  • Name the framework or attestation you require
  • Say whether it is a hard requirement or a preference
  • Ask for a written statement of what exists today
  • Ask for the scope and date of any report you are shown

What insurance does Deploris carry?

Our About page states that Deploris LLC carries general liability and professional liability insurance and that certificates of insurance are available on request. Request the certificate to see the actual cover, as it is the document that matters.

Buildings and facilities often ask for a certificate naming the building owner or operator. Ask for this early, because it can decide whether a visit can go ahead. Tell us the cover types and limits your contract requires so we can confirm what is available.

  • A certificate of insurance for your file
  • A certificate naming the building owner or operator, where required
  • The cover types and limits your contract requires

How do I send a security questionnaire?

Send security questionnaires and procurement requests through the contact form. Include your deadline, the work you are considering and the documents you need.

Answers are based on what is true today. Where we do not have a document or a control, we will say so. Where a requirement can be met by wording in the scope or by your own policy applied on site, we will tell you.

  • Send your questionnaire through the contact form
  • State the sites, the work and your deadline
  • List any document you consider mandatory

Looking for regulation guides such as GDPR or NIS2? See Compliance.

QUESTIONS

Common questions.

Is Deploris ISO 27001 or SOC 2 certified?
No certification of that kind is listed on this site. We do not claim one. If your procurement process requires a specific framework, tell us which one and we will say what is available and what is not.
Can Deploris sign an NDA or a data processing agreement?
Our About page says we can execute NDAs, DPAs and site-specific security protocols as the engagement scope requires. Send your template and tell us which documents you need, and we will confirm the details.
Can you provide a certificate of insurance?
Our About page says certificates of insurance are available on request for procurement. Ask for the certificate and tell us the cover types and limits your contract requires.
Are your engineers background-checked?
Our site describes the engineers as vetted and background-checked. If you need specific checks, such as a certain scope or country, ask for them to be written into the scope. We will confirm what can be met before work begins.
Who controls what an engineer can do on site?
You do. The written scope lists the allowed tasks and any do-not-touch devices, and your named approvers authorize changes. Engineers act on written instructions and confirm labels before acting.
How should I send a security questionnaire?
Send it through the contact form with your deadline, the sites and the work involved. Answers describe what is true today, including where a document or control does not exist.

Get started

Need a document for procurement?

Tell us the sites, the scope and the timeline. We reply with a written plan.

Go to

Saved and recent pages stay on this device. Press ? for keyboard shortcuts.

Keyboard shortcuts

Search the site
/ or Ctrl K
Show this list
?
Switch light, dark or system theme
t
Save or unsave this page
s
Go to the home page
g then h
Go to services
g then s
Go to coverage
g then c
Go to the contact form
g then q

Shortcuts are off while you type in a field.