Security Review Intake and SLA
NDA-scoped intake workflow, ownership model, and response timing commitments.
Intake requirements
- Customer name and primary reviewer contacts
- Questionnaire or security template
- NDA status and legal terms (if applicable)
- Requested artifacts and target completion date
<section>
<h2>Response targets</h2>
<ul>
<li>Initial response target: 3-5 business days</li>
<li>Priority handling for active pilots and production onboarding</li>
<li>Follow-up timelines provided when additional evidence is required</li>
</ul>
</section>
<section>
<h2>Ownership matrix</h2>
<ul>
<li>Security: control interpretation and risk language</li>
<li>Operations: infrastructure/process evidence and runbook alignment</li>
<li>Customer Success: coordination, timeline management, customer communication</li>
<li>Legal/compliance: contractual and policy review where required</li>
</ul>
</section>
<section>
<h2>Review cadence</h2>
<ul>
<li>Security response materials are reviewed at least annually.</li>
<li>Material infrastructure or policy changes trigger interim updates.</li>
</ul>
</section>