Snapshot 46647
Normalized text
Scripts and page chrome removed; this is what change detection compares.
CDS SECURITY Real Protection. Real accountability. Zero compromises. Security is the infrastructure behind every real result we deliver. SECURITY Overview At Complete Discovery Source, Inc., security isn’t an add-on. It’s the foundation of how we design, operationalize, and support every solution for our clients. From data staging through ingestion, processing, production, and retention within SaaS platforms, our practices are engineered to protect the security, integrity, availability, confidentiality, and privacy of your data at every step. Secure by Design We employ a defense-in-depth architecture to protect client data across its full lifecycle, from ingestion through retention and secure disposition. Our approach combines technical controls, disciplined operational procedures, and continuous monitoring to deliver security and privacy of client data at the highest standards. Security oversight is embedded across executive leadership, engineering, and operations. Controls are documented, independently audited, and continuously reviewed to meet the expectations of enterprise clients, government agencies, and regulated industries. The First FedRAMP Authorization in eDiscovery Complete Discovery Source, Inc. sets the benchmark for security in the eDiscovery industry as the first provider to achieve an Authorization to Operate (ATO) under the Federal Risk and Authorization Management Program (FedRAMP). FedRAMP ATO is the security-based approval necessary to host Controlled Unclassified Information (CUI) and other sensitive data on behalf of U.S. federal agencies. This achievement demonstrates our ability to operate securely and meet the most rigorous of security standards. CORE CERTIFICATIONS Independently Audited, Compliant & Certified. We maintain certifications that demonstrate disciplined, verifiable security practices across our organization. ISO/IEC 27001:2022 Our independently audited ISO 27001-certified information security management system reflects a structured approach to risk management, data protection, and continuous improvement. SOC 2 Type 2 Independently audited SOC 2 controls govern our production and disaster recovery environments, validating our operational security, integrity, availability, confidentiality, and privacy controls. Cyber Essentials Plus Independent verification that our systems meet robust security standards in compliance with handling and protecting sensitive government data and maintaining trusted supplier status. These controls complement the security of leading eDiscovery cloud platforms, such as RelativityOne and RelativityOne Gov, creating a comprehensive, layered, defense-in-depth approach to servicing client data. Global Compliance Across Industries We align with established global and U.S. regulatory standards to support our clients’ compliance obligations. GDPR Controls support secure handling of personal data, including workflows for redaction, anonymization, and cross-border data transfers. PCI We maintain security controls aligned with PCI standards to protect payment card information and reduce the risk of data breaches involving financial transactions. CCPA and Evolving State Privacy Laws CDS complies with the California Consumer Privacy Act (CCPA) and closely monitors evolving U.S. state and federal privacy laws. Our processes are designed to support clients in meeting their obligations related to consumer data rights and transparency. GLBA For clients in the banking and financial sectors, CDS supports compliance with the Gramm-Leach-Bliley Act (GLBA) through strict controls that protect nonpublic personal financial information. PHI / HIPAA CDS safeguards protected health information (PHI) in accordance with HIPAA requirements. As a Business Associate, we implement administrative, technical, and physical safeguards to ensure the confidentiality and integrity of healthcare-related data. ITAR CDS offers secure environments capable of supporting ITAR requirements, enabling clients with export-controlled matters to host data in compliance with applicable regulations. UK GDPR CDS supports compliance with the UK GDPR and the UK Data Protection Act 2018 through audited security controls, including ISO/IEC 27001 certification, SOC 2 Type 2 oversight, Cyber Essentials Plus, UK-resident data center options, and Crown Commercial Service supplier status (RM6336). Our framework supports secure data processing and lawful cross-border transfers, including use of the UK International Data Transfer Addendum where appropriate. Swiss FADP CDS supports compliance with the revised Swiss Federal Act on Data Protection (FADP) through independently audited security controls, including ISO/IEC 27001 certification, SOC 2 Type 2 oversight, and EU- and Swiss-resident data center storage options. Our technical and organizational safeguards, data processing agreements, and transfer mechanisms are designed to protect personal data relating to Swiss data subjects. NIST 800-171 We align our security controls with NIST 800-171 requirements to support clients in the defense and government sectors who require enhanced protection of sensitive information Why CDS Security Is Unparalleled Security isn’t just about compliance, it’s about trust earned through consistent execution. Whether we’re processing discovery data, staging it for analysis, or moving it securely to cloud systems, our approach ensures: Security, integrity, availability, confidentiality, and privacy Data control, process visibility, and client transparency Predictable, resilient, and scalable operations When clients trust us with their most sensitive information, we treat that responsibility as non-negotiable. Let's talk. Contact us today to discuss your project. Complete the form, email us, or just give us a call. Email Phone (212) 813-7000 (855) 813-0700 (Toll Free) Learn More For detailed security documentation, audit summaries, or questions about specific protocols, contact our Security Team at . Contact Us English Français Deutsch