General Privacy Policy

This policy applies to website visitors, prospects, customers, partners, suppliers, event attendees, newsletter subscribers, users of Sigma Technology products and services, and individuals interacting with our organization online or offline.

This policy does not apply to customer-owned information processed solely under service agreements where Sigma Technology acts as a processor.

We may collect: names, business contact information, email addresses, company details, billing information, support communications, device information, IP addresses, browser details, security telemetry, cloud configuration metadata, audit logs, vulnerability findings, asset inventory, compliance artifacts, screenshots, assessment evidence, and other information submitted through our products.

Information may be collected directly from users, customer environments, cloud integrations, public sources, social media, event registration systems, marketing campaigns, marketplace platforms, business partners, and third-party integrations.

We use personal information to provide services, administer accounts, fulfill contracts, deliver cybersecurity assessments, provide cloud posture management, analyze usage, secure systems, conduct business operations, support customers, manage subscriptions, and comply with applicable law.

Sigma Technology and CyberGuard.ai may use AI and machine-learning technologies to evaluate cloud environments, map controls, generate policy recommendations, create reports, automate evidence collection, identify vulnerabilities, generate risk scores, and support compliance activities.

AI-generated outputs are intended to assist customers and should not independently be considered legal, audit, or regulatory determinations.

Sigma Technology may process customer-controlled information related to vulnerability scans, compliance assessments, cloud resources, logs, endpoint metadata, audit evidence, OSCAL files, risk assessments and telemetry. Sigma Technology acts as a service provider or processor according to contractual agreements.

Our services may integrate with cloud providers, identity systems, vulnerability scanners, marketplaces, ticketing systems, and SIEM platforms including Microsoft Azure, Microsoft 365, AWS, Google Cloud, Entra ID, GitHub, Wazuh and similar technologies.

Sigma Technology supports customers operating under CMMC, NIST, FedRAMP, FISMA, SOC 2, HIPAA, ISO 27001, TX-RAMP and related frameworks. Certain environments may operate under additional contractual controls.

Where required by applicable law, we process information pursuant to legitimate interests, consent, contractual necessity, legal obligations, and business operations.

Information is retained only for periods necessary for business, legal, security, contractual, audit, or regulatory requirements. Assessment artifacts, customer records, support communications and security logs may be retained according to service agreements.

We may disclose information to service providers, affiliates, cloud hosting providers, payment processors, marketing providers, event sponsors, resellers, partners, legal authorities, or in connection with mergers and business transactions.

Information may be transferred and processed globally. Appropriate safeguards such as contractual protections and transfer mechanisms may be implemented where required.

Sigma Technology employs layered administrative, physical and technical safeguards including encryption, least privilege, RBAC, MFA, monitoring, vulnerability management, logging, incident response, and secure software development practices.

We may use cookies, pixels, analytics tools and similar technologies to improve functionality, understand site usage, support security operations and personalize experiences.

Individuals may have rights under applicable laws including access, correction, deletion, portability, objection, opt-out rights and restrictions on certain processing activities.

Sigma Technology may process information relating to resellers, CPA firms, MSPs, consultants, alliance partners and partner program participants for onboarding and co-marketing purposes.

Security researchers are encouraged to responsibly report potential security vulnerabilities to support@sigmatechllc.com.

Sigma Technology does not intentionally collect sensitive personal information or knowingly market services to children. If such information is inadvertently collected, reasonable efforts will be made to remove it.

Questions or complaints regarding this Privacy Policy may be directed to Sigma Technology Partners, LLC through official contact channels on our website.