Our leadership team is attending CloudFest Americas, from Nov 4 to 16. Schedule a Connect
Our Leadership team is attending CloudFest Americas 2026, from Nov 4 to 16.
Meet us in Miami to discuss MSP growth, DevOps excellence, and Cloud Transformation. Available for 1:1 meetings, Schedule a Connect
Trust & security
Our approach to protecting information and information assets while delivering technical support and managed services, aligned with ISO/IEC 27001:2022.
SupportSages Consultancy Services Private Limited is dedicated to safeguarding the information and information assets used to deliver services and support to our clients. We identify the security needs and expectations of relevant parties and address them through a structured process of risk assessment and mitigation.
This commitment is supported by an Information Security Management System (ISMS) designed for continual improvement, with security objectives defined and monitored across relevant processes.
Our information security programme is intended to:
Information security expectations apply to SupportSages employees and to non-employees who work with or on behalf of SupportSages in roles that involve access to information, systems, or service environments.
Everyone in scope is expected to understand their responsibilities, follow applicable controls, and contribute to the improvement of our security objectives.
Governance forums and dedicated security roles support the planning, implementation, and oversight of controls suited to our operating context. Key practices include:
We identify information assets involved in service delivery, assess related risks, and apply proportionate controls to reduce those risks over time.
Security events are handled through defined incident processes covering detection, assessment, response, and follow-up actions.
Business and customer information is classified and handled according to its sensitivity and applicable contractual or regulatory requirements.
Changes to information systems are managed through controlled processes so updates do not introduce unnecessary security exposure.
Employees and relevant associates receive information security awareness guidance suited to their roles and responsibilities.
We review and adopt relevant industry practices and technology improvements that strengthen our security posture.
Our practices are designed to support applicable legal, regulatory, and contractual information security obligations.
Continuity planning helps reduce the impact of disruption on critical processes that support customer service delivery.
Material updates to our information security policy direction are reviewed through internal security governance and require formal leadership approval. Reviews consider changes in business operations, technology environments, threat and vulnerability trends, and lessons from reported security incidents.
Compliance with our information security expectations is verified through internal and external audits, operational feedback, and ongoing oversight. Adequate resources are allocated to support effective implementation of these practices.
SupportSages maintains an information security management framework aligned with ISO/IEC 27001:2022, including leadership commitment to information security policy and organisational controls for information security. This page summarises our public-facing approach; specific contractual and operational controls are defined with customers as part of service delivery.
For how we handle customer information in service delivery, see Data Protection. For GDPR-related practices, visit our GDPR page. For website privacy practices, read the Privacy Policy.