SECURITY & COMPLIANCE

Trust & Security at United Alliances

Last Updated: 3 February 2026 | Effective Date: 3 February 2026

At United Alliances, security, privacy, and compliance are embedded into our operational DNA. As a provider of Virtual Assistant, outsourcing, and remote business support services, we recognize that clients entrust us with sensitive business information, operational access, and personal data. Protecting that trust is a core responsibility we take seriously across our people, processes, and technology.

This page outlines how we govern security, protect data, manage risk, comply with applicable U.S. regulations, and maintain accountability across our organization.

1. SECURITY GOVERNANCE & ORGANIZATIONAL ACCOUNTABILITY

United Alliances maintains a structured security governance framework designed to ensure clear ownership, oversight, and continuous improvement.

Key governance principles include:

• Executive accountability for security and compliance
• Clearly defined roles and responsibilities
• Documented policies and procedures
• Formal escalation and incident management processes
• Periodic reviews and updates

Security decisions are made using a risk-based approach, balancing operational requirements with data protection and regulatory obligations.

2. DATA PROTECTION & PRIVACY COMPLIANCE

United Alliances processes personal and business data in accordance with applicable United States privacy laws, including:

• California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
• Other applicable U.S. state privacy and consumer protection laws

United Alliances does not target or provide services to individuals located in the United Kingdom or European Union. GDPR and UK privacy regulations do not apply to our operations.

Business & Processing Roles

• Business / Controller Role: For website visitors, marketing communications, vendor relationships, and corporate contacts.
• Service Provider / Processor Role: When processing client data strictly on behalf of clients and under documented contractual instructions.

All data handling follows core privacy and security principles, including:

• Purpose limitation
• Data minimization
• Confidentiality and integrity
• Storage limitation
• Accountability

3. CLIENT DATA OWNERSHIP & USE LIMITATION

• All client data remains the exclusive property of the client
• United Alliances does not sell, rent, share, or commercially exploit client data
• Client data is accessed only to deliver contracted services
• Access is limited to authorized personnel assigned to the engagement

End of Engagement Handling

Upon termination or completion of services:

• System and tool access is promptly revoked
• Client data is returned or securely deleted upon request
• Data is retained only where required by law or contractual obligation

4. INFORMATION SECURITY POLICIES & FRAMEWORK

United Alliances maintains documented internal policies and standards covering:

• Information Security Management
• Data Protection & Privacy
• Access Control & Identity Management
• Remote Work & Device Security
• Incident Response & Breach Management
• Data Retention & Secure Deletion
• Acceptable Use & Confidentiality

Policies are reviewed periodically to ensure alignment with:

• Regulatory changes
• Evolving cyber threats
• Business and technology changes

5. RISK MANAGEMENT & THREAT AWARENESS

We apply a defense-in-depth and risk-based security model, including:

• Identification of security risks
• Likelihood and impact assessments
• Preventive and detective controls
• Continuous monitoring and review

Key risks addressed include:

• Unauthorized access
• Data leakage
• Insider threats
• Phishing and social engineering
• Malware and ransomware
• Human error

6. ACCESS CONTROL & IDENTITY MANAGEMENT

Access to systems, tools, and client data is governed by strict controls:

• Role-based access (least-privilege principle)
• Unique user credentials (no shared accounts)
• Multi-factor authentication where supported
• Formal access approval and revocation workflows
• Periodic access reviews

Access is immediately revoked when personnel:

• Change roles
• No longer require access
• Exit the organization

7. REMOTE WORK & WORKFORCE SECURITY

As a remote-service provider, United Alliances enforces enhanced workforce security measures:

• Secure and monitored work environments
• Endpoint protection (antivirus, firewall)
• Mandatory screen locking and session timeouts
• Restrictions on public or unsecured Wi-Fi
• Controlled use of external storage devices
• Prohibition of unauthorized data downloads

All Virtual Assistants receive training on secure handling of:

• Client systems and credentials
• Confidential information
• Sensitive operational data

8. TECHNICAL & INFRASTRUCTURE SECURITY

Network & Infrastructure

• Secure cloud infrastructure
• Firewalls and network segmentation
• Intrusion detection and monitoring

Data Protection

• Encryption in transit (TLS / HTTPS)
• Secure storage environments
• Controlled data transfer mechanisms

Logging & Monitoring

• System and access logging
• Activity monitoring
• Audit trails to support investigations and compliance

9. INCIDENT RESPONSE & DATA BREACH MANAGEMENT

United Alliances maintains a documented Incident Response and Breach Management Plan.

Incident Handling Lifecycle

• Detection and identification
• Containment and isolation
• Impact and scope assessment
• Remediation and recovery
• Client notification (where required)
• Regulatory notification (where legally required)
• Post-incident review and improvement

Our approach prioritizes containment, transparency, accountability, and prevention of recurrence.

10. DATA RETENTION & SECURE DELETION

Data is retained only for as long as necessary to:

• Fulfill contractual obligations
• Meet legal or regulatory requirements
• Resolve disputes or enforce agreements

When data is no longer required:

• Secure deletion methods are applied
• Access is permanently revoked
• Retention schedules are enforced and documented

11. THIRD-PARTY & SUB-PROCESSOR MANAGEMENT

United Alliances uses vetted third-party vendors to support operations such as:

• Cloud hosting
• Communication platforms
• Analytics tools
• Payment processing

Before engagement, vendors undergo:

• Security and privacy due diligence
• Contractual data protection commitments
• Scope-limited access authorization

Vendors are reviewed periodically for ongoing compliance.

12. COMPLIANCE FRAMEWORK ALIGNMENT

United Alliances aligns its security and privacy controls with recognized standards and best practices, including:

• ISO/IEC 27001 information security principles
• Privacy-by-design concepts
• Industry best practices for outsourcing and remote service providers

Relevant documentation may be shared upon request during client due-diligence processes.

13. TRAINING, AWARENESS & CONFIDENTIALITY

All employees and Virtual Assistants are required to:

• Sign confidentiality and data protection agreements
• Complete security and privacy awareness training
• Follow internal security and acceptable-use policies

Security policy violations are addressed through formal disciplinary procedures.

14. SHARED RESPONSIBILITY MODEL

Security is a shared responsibility.

United Alliances Is Responsible For

• Internal security governance and controls
• Workforce management and oversight
• Secure service delivery practices

Clients Are Responsible For

• Managing their own systems and credentials
• Granting appropriate access
• Reviewing deliverables
• Maintaining internal compliance programs

15. AUDITS, REVIEWS & CONTINUOUS IMPROVEMENT

United Alliances continuously strengthens its security posture through:

• Policy and control reviews
• Access audits
• Incident simulations
• Vendor reassessments
• Client security feedback

Security is treated as an ongoing program, not a one-time checklist.

16. TRANSPARENCY & CLIENT ENGAGEMENT

We believe trust is built through transparency. United Alliances supports client security and compliance inquiries and due-diligence efforts.

Upon request, we may provide:

• Security and privacy policy summaries
• Data protection confirmations
• Sub-processor disclosures
• Responses to vendor risk and security questionnaires

17. CONTACT – SECURITY & COMPLIANCE

United Alliances
 security@unitedalliances.com
 privacy@ualliances.com
 888-232-6003
 1468 W 9th St, Suite 2003, Cleveland, OH 44118, USA