Secure Delivery · 03 of 3
Compliance & Access
Frameworks NGT works to, access and data handling, rules for AI tools.
Frameworks we work to
- ISO/IEC 27001 · NIST · SOC 2
- HIPAA / HITRUST · GxP
- PCI DSS
- GDPR
- MAS TRM · OSPAR
01
Frameworks NGT Works To
Frameworks NGT designs and operates controls against for customers. Not certifications held by NGT.
Security and privacy
ISO/IEC 27001NISTSOC 2GDPR
Industry
HIPAA / HITRUSTPCI DSSGxP
Hardening and AppSec
CIS BenchmarksOWASP
Financial-sector regulators
MAS TRMOSPAR
Frameworks, Not Certificates
NGT builds controls and evidence for these frameworks. Company certifications are FPT Software's; their scope is confirmed per engagement.
02
Access and Data Handling
| Topic | How NGT handles it |
|---|---|
| Identity | SSO, MFA, RBAC and least privilege, for people and pipelines |
| Secrets | In a vault, never in code; pre-commit checks catch leaks |
| Environment access | Per role and environment; production in time-boxed windows |
| Customer data | Stays in your zone; masked before any AI tool sees it |
| Audit | Write-once logs of who approved what |
| Retention | Assessment data purged seven days after project deletion |
03
Rules for AI Tools
AI assistants speed up engineers only inside these rules, and only where your policy allows.
- Enterprise licences onlyNo personal accounts; data sharing and training on your data off.
- Mask customer dataMasked before it goes anywhere near a prompt.
- Verify every outputGenerated code passes the same review and quality gates.
- Reviewed prompt setsReusable, reviewed prompts; lessons written down and shared.
Your codeYour data
Masking + enterprise licenceData sharing off
Engineer reviewSame quality gates
Questions on Security
The questions this part raises, and their answers.
Not for building. Offshore work uses mock or synthetic data; real data is connected inside your zone, through adapters you approve.
SourcesFPT Software Hanoi executive outlook, secure AI delivery patterns (Oct 2026)NGT self-hosted MLOps practice notes (2026)AI-First DevOps Transformation Services & Solutions (Oct 2026)NGT Platform Engineering v1.2 (Sep 2026)NGT DevSecOps Service Offering (Jan 2025)NGT Cloud managed-service map (Mar 2026)FPT Full SDLC with GenAI and multi-agents v1.2.4 (Jun 2025)FleziLift runbook and connector notes (Oct 2026)