Compliance is table stakes. Trust is the product.
Audited controls, certified facilities, and residency you can point to — in every region we operate.
How the fleet is defended.
Four layers, one accountable operator — the same controls audited in our certifications.
Concurrent-maintainable power and cooling, mantraps and biometric access, 24/7 on-site security, and CCTV retention aligned to MTCS requirements. Visitor access is escorted, logged, and reviewed.
Single-tenant compute and fabric partitions, private networking with customer-managed peering, encryption in transit and at rest, and secure media destruction with certificates on decommission.
Background-checked staff, least-privilege access with hardware-key MFA, change management with four-eyes review, and a 24/7 incident response rota with named engineers — not a ticket queue.
Region pinning per dataset and per endpoint, PDPA and GDPR processing terms in the agreement, deletion SLAs on offboarding, and no training on your data — ever, for anything.
Found something? Tell us first.
We run a coordinated disclosure program with safe-harbor terms for good-faith research. Report privately, get an acknowledgement within one business day, and a triage decision within five.
PGP fingerprint on request
ACK ≤ 1 business day · TRIAGE ≤ 5
Your security team will have questions.
Good. Bring them — we'll put our compliance lead on the call.
Talk to sales68 Circular Road, #02-01
Singapore 049422
hello@gridwind-solutions.com