When a large client evaluates suppliers, this is the conversation you must be able to hold without improvising. Here is the answer, written for you to use.
Our own infrastructure, not a service resold from an anonymous third party.
Access is controlled and limited to those who must have it.
Positions, trips, alerts and the client's configuration.
History is retained for months, not days.
Information does not cross between resellers or between end clients.
All of the above is copied daily.
Exact words you can use on the visit. No jargon.
“Your data isn't on a server rented in nobody's name. It's on our infrastructure, which we run ourselves.”
“We can tell you what is stored, for how long and who has access. No hedging.”
You resell under your own brand. This is who it works for, and with what argument.
Where an information security questionnaire must be answered.
Transport of people, valuables or medicines.
Those who must show where and how their information is stored.
Where head office asks before approving a local supplier.
When they ask you to justify data handling, send them this page.