Security & Data Protection
Gifford Productions takes the security and confidentiality of client information seriously. We maintain documented security, privacy, access-control, and responsible AI practices designed for the video-production and learning-management services we provide.
Our approach combines appropriate internal controls with established cloud, hosting, collaboration, and business-service providers.
Information Security
Gifford Productions uses administrative and technical safeguards designed to protect non-public client, business, project, and learner information.
Our practices include:
- Multi-factor authentication on key business and administrative systems
- Individual account access and least-privilege principles
- Restricted administrative privileges
- Secure encrypted connections for websites and learning environments
- Managed cloud hosting
- Automated backups and restoration capabilities
- Contractor confidentiality and security requirements
- Documented rules governing artificial intelligence and confidential information
- Removal of access when it is no longer required
Security practices are reviewed as our services, systems, and client requirements evolve.
Learning Management System Security
Gifford Productions develops, hosts, and supports customized learning-management environments designed around client training, reporting, certification, and access requirements.
Administrative privileges are tightly limited, and clients are provided role-based access appropriate to their responsibilities.
Sensitive learner information is protected through access controls, secure hosting, encrypted connections, backup practices, and documented data-handling requirements.
Client-specific security, privacy, access, and retention requirements can be incorporated into an engagement when needed.
Hosting, Backups & Availability
Gifford Productions uses established managed cloud-hosting providers for websites and learning environments.
Our hosting infrastructure provides security and availability capabilities that include encrypted connections, network and firewall protections, monitoring, automated backups, and restoration services.
Backup restoration capabilities are tested through actual operational use.
Additional hosting, backup, or retention requirements can be evaluated for clients with specific needs.
Responsible Use of Artificial Intelligence
Gifford Productions uses approved business AI tools to support legitimate activities such as:
- Proposal and content development
- Scriptwriting
- Course and training development
- Project planning
- Research
- Draft communications
- Production and business workflows
Our documented AI & Confidential Information Policy establishes information-handling rules based on sensitivity and requires data minimization when AI tools are used.
Sensitive learner records, credentials, payment and banking information, authentication secrets, and other information classified as Restricted are not intentionally submitted to generative AI systems for routine processing.
Client-specific restrictions on AI use take precedence over our standard practices.
Access, Contractors & Collaboration
Access to non-public client information is limited to individuals who require it for their assigned responsibilities.
When contractors or freelancers require project access, they are subject to documented confidentiality, security, access-control, AI-use, and data-handling requirements.
Access is limited to what is reasonably necessary for the work and is removed when it is no longer required.
Gifford Productions uses established cloud collaboration and file-storage services for project materials, client review, and business operations, with multi-factor authentication used on key systems.
Personal Information & Privacy
Gifford Productions may process personal information in connection with:
- Client and project communications
- Website inquiries and scheduling
- Learning-management administration
- Training participation and completion
- Course surveys and evaluations
- Billing and invoicing
We seek to collect and use information only as reasonably necessary for the applicable business, training, contractual, or client purpose.
For additional information about how personal information is collected, used, shared, and retained, please review our Privacy Policy.
Incident Response & Data Protection
Gifford Productions maintains procedures for responding to suspected security or privacy incidents.
Depending on the circumstances, response activities may include containment, credential protection, investigation, system recovery, coordination with technology providers, evaluation of notification requirements, and corrective action.
Information is retained according to applicable business, contractual, legal, regulatory, accounting, training, certification, and security requirements.
Technology & Service Providers
Gifford Productions works with established technology providers for services such as:
- Managed hosting
- Business email
- Cloud storage and collaboration
- Accounting and payment processing
- Video hosting
- Scheduling
- Artificial intelligence
- Business and project-management systems
We select services according to business requirements, reliability, security capabilities, and client needs.
Client-Specific Security Requirements
We recognize that organizations may have their own requirements for information security, privacy, artificial-intelligence use, authentication, file storage, access control, data retention, and vendor management.
Gifford Productions can evaluate reasonable client-specific security requirements as part of an engagement.
Where agreed client requirements are more restrictive than our standard practices, those requirements take precedence.
Security & Privacy Questions
Clients, procurement teams, and information-security personnel may contact us for additional information or request our more detailed Client Security & Data Protection Overview.
Gifford Productions
Email: info@giffordproductions.com
Website: GiffordProductions.com