Security Review Intake and SLA
Last updated: February 2026
Classification: NDA-scoped reviewer documentation
Intake requirements
- Customer name and primary reviewer contacts
- Questionnaire or security template
- NDA status and legal terms (if applicable)
- Requested artifacts and target completion date
Response targets
- Initial response target: 3-5 business days
- Priority handling for active pilots and production onboarding
- Follow-up timelines provided when additional evidence is required
Ownership matrix
- Security: control interpretation and risk language
- Operations: infrastructure/process evidence and runbook alignment
- Customer Success: coordination, timeline management, customer communication
- Legal/compliance: contractual and policy review where required
Review cadence
- Security response materials are reviewed at least annually.
- Material infrastructure or policy changes trigger interim updates.