Client-approved systems
Work is performed inside the systems, portals, and environments the client approves. We do not introduce unapproved tools into a client workflow.
Trust
Security & Confidentiality
Our clients hand us records they are accountable for. These are the practices we hold ourselves to on every assignment.
Last updated August 2026
Working practices
No unauthorized downloading
Records stay where the client puts them. Files are not copied to personal storage, personal email, or unapproved devices.
Role-based access
Access is limited to the specific records and systems required for the assignment, and is removed when the assignment or engagement ends.
HIPAA-aware practices
Healthcare work is handled with minimum-necessary access and confidentiality practices, and under a Business Associate Agreement where the client requires one.
Documented quality procedures
Each assignment follows written requirements — formats, naming conventions, accuracy standards, and acceptance criteria — with a quality-control review before delivery.
Confidentiality commitments
Personnel work under confidentiality obligations, and we sign client NDAs and security addenda as part of onboarding.
Secure workspace habits
Screen privacy, device locking, current operating-system and browser updates, and encrypted connections are standard working practice.
Incident communication
If a suspected issue affects client data, we notify the client contact promptly and follow the reporting steps defined in the engagement.
What we do not claim
We describe our working practices honestly. Liminal Framework LLC does not currently claim any formal certification or accreditation, including SOC 2, ISO 27001, FedRAMP, or HIPAA certification — HIPAA compliance is a program obligation, not a certification we hold.
Where a contract requires specific controls, security documentation, training, or background screening, we will review the requirement and confirm in writing what we can meet before work begins.
Website data
This website collects only what you submit through our forms and is served over encrypted HTTPS. Client records are never transmitted through or stored on this site. See the Privacy Policy for details.
To report a suspected security issue with this website, email contact@liminalframeworkllc.com with the details and how to reproduce it. Please do not test in a way that disrupts the site or accesses data that is not yours.
Discussing your security requirements
Tell us the access model, systems, and handling requirements for your records and we will confirm how the work would be performed.