When a hospital's nursing station, a bank's compliance laptop, or an IT firm's developer machine comes in for repair, the question isn't just whether it gets fixed. It's who touched it, when, and what they could see. We answer that question with documentation, not promises.
We'll send a tailored security brief and proposal within 24 hours.
Each pillar is an operational control. Not a policy document. Here is exactly what we do.
Every device in our care has a documented handoff trail. The log records who collected the device, from which point-of-contact, at what time, and in what physical state. It follows the device through every internal handoff until return.
Engineers who work on enterprise accounts are not rotated randomly. They are assigned, identified, and their credentials are documented.
Most hardware repairs do not require OS login. When diagnostics do require access, a structured protocol applies.
Devices in transit between your site and our service location travel in tamper-evident packaging. Any breach is visible and logged.
Every repair action is logged. For enterprise accounts, this log is the audit trail your compliance team can review.
When a device is not actively being serviced, it is stored in a controlled environment. Not on an open bench, not in a communal rack.
You know where your device is at every stage. No ambiguity about whether it's in transit, at the bench, in QA, or ready for return.
A mutual Non-Disclosure Agreement is available as a standard add-on for enterprise clients. This is not a formality. It defines the scope of confidential information, the obligations of both parties, and the recourse available if either side fails to uphold them.
Six stages. Each one documented. Each handoff signed off before the next begins.
Available for enterprise accounts. Request any of these when submitting your proposal.
A signed mutual Non-Disclosure Agreement covering device contents, client information, and repair findings. We accept your organisation's standard vendor NDA template or provide our own. Typically signed before first device collection.
For devices being retired, reassigned, or returned to a leasing company. We perform a documented drive sanitisation process and provide a written certificate per device, including drive serial number, method, date, and the name of the engineer who performed the wipe.
One named, background-verified engineer handles all devices for your account. No rotation between jobs. The same person who collected your first device handles your second, third, and all subsequent ones. Available for accounts with regular repair volume.
Devices collected in pre-sealed, numbered, tamper-evident bags provided by us. Each bag is photographed at the point of collection. The photograph and seal number are recorded in the custody log. Any bag-level irregularity is flagged before the device is opened at the service centre.
Physical repair involves risk. A screen replacement can encounter a fragile connector. A liquid-damage clean can reveal pre-existing corrosion. We believe in telling you exactly what our obligations are before we start, not after something unexpected occurs.
If incidental damage occurs during a repair, the engineer stops work immediately, photographs the condition, and records a written incident entry in the repair log. Work does not resume on the device until escalation is complete.
The incident is escalated to your dedicated account manager within 2 hours of the event. The account manager notifies your designated IT contact and provides an initial description of what occurred.
A written incident report is issued within 24 hours. It documents the fault being repaired, the action that led to the incidental damage, the component affected, and the current condition of the device.
We discuss remediation options with you directly. Depending on the nature of the damage, options may include: repair of the incidental damage at our cost, sourcing a replacement part, a partial or full cost offset on the original repair, or, for enterprise accounts on AMC, escalation through the contract terms. Outcomes are agreed in writing before proceeding.
A clear-eyed account of the controls we operate and the documents we can provide. Nothing claimed that isn't verifiable.
We do not hold SOC2 Type II, ISO 27001, or equivalent third-party security certifications. We are a verified, experienced device service provider operating documented internal controls. If your organisation requires a certified third-party-audited vendor, we recommend reviewing our controls documentation against your requirements and making the determination accordingly. Our account managers can arrange a review call with your IT security or procurement team.
Send us a brief about your devices and sector. We'll respond within 24 hours with a controls summary and proposed terms tailored to your account.