Security & Cyber Risk Notice

Our security posture

Big BAM uses reasonable administrative, technical, and organizational safeguards appropriate to the OrientShift Services. The app uses authenticated access controls, protected session and entitlement checks, server-side authorization for operator records, encrypted transport through the hosting platform, audit-oriented payment events, and restricted handling of secrets.

What we do not promise

No internet-connected system is completely secure. We do not promise uninterrupted operation or immunity from every attack, error, provider outage, unauthorized access attempt, or data-loss event. We do not represent that Big BAM carries cyber-liability insurance.

Your responsibilities

Use a unique password, protect account access, submit only information you are authorized to share, avoid unnecessary sensitive information, and notify us promptly if you suspect unauthorized access. Organizations remain responsible for their own security policies, workforce access, devices, backups, and insurance.

Security reports and incidents

Report a suspected vulnerability, unauthorized access, or security incident to orientshift@gmail.com. Please include enough detail to investigate and do not access, copy, alter, or disclose another person's data. We will evaluate reports, take reasonable containment steps, and provide notices required by applicable law or a signed DPA/MSA.

Providers and changes

OrientShift depends on service providers for hosting, database, authentication, payment, email, calendar, AI, and security functions. Their controls and availability affect the overall service. We may update safeguards and this notice as the product changes.

Last updated: November 5, 2026

These documents are provided for business use and are not legal advice. Big BAM LLC should obtain jurisdiction-specific legal review before relying on them for a particular engagement.