Skip to content

Trust centre

Security and compliance at SS Universal 

How we protect your data, your customers and your reputation, explained plainly for your security and procurement teams.

Abstract blue shield representing data security

Controls

The controls behind every programme

Physical security

Biometric access, CCTV, visitor logs and a clean-desk policy on the production floor.

Access control

Individual accounts, MFA, least-privilege roles and same-day removal of leavers.

Endpoint security

Managed workstations with USB storage disabled, endpoint protection and patching.

Agreements

NDAs for every employee; DPAs, BAAs and client-specific terms on request.

Training

Security, privacy and HIPAA awareness training at induction and every year.

Monitoring and audit

Activity logging, quality sampling and support for client audits and site visits.

Our approach

Your systems, your data

Wherever possible our teams work directly in your systems through secure, individually assigned accounts. Your data stays where you control it, and you can see and revoke access at any time.

Frameworks we align with

Our information-security policies are aligned with ISO/IEC 27001 controls. We follow HIPAA-aligned safeguards for healthcare work, GDPR and UK GDPR principles for European personal data, and India's Digital Personal Data Protection Act. We are happy to complete your security questionnaire.

Business continuity

Our delivery centre has online UPS and generator backup and two internet links from separate providers. For critical programmes we agree documented continuity plans, including remote-work fallbacks with the same security controls.

Reporting a concern

If you believe you have found a security issue affecting SS Universal, email info@ssunicomservice.com with the subject "Security". We acknowledge reports within two business days.

Security questions

Yes. We regularly complete questionnaires such as SIG Lite, CAIQ and custom forms, and we can join a call with your security team.

Yes, for any healthcare engagement that involves protected health information.

Yes. Clients can visit and audit our centre in India with reasonable notice, or take a live video walkthrough.