Policies and compliance

DNZ Consulting LLC · New York registration 7798491 · Effective August 27, 2026

DNZ Consulting LLC publishes the policies below. They govern how we protect information and how we handle personal data. We review every document one time each year, and after any security incident.

Send any security or privacy question to privacy@dancykier.com. The Managing Member acts as our Data Protection Officer and answers within 30 days.

• Privacy PolicyHow we collect, use, and protect personal data.
• Information Security PolicyOur security program, controls, and responsibilities.
• Network Security PolicySegregation, firewalls, and threat monitoring.
• Endpoint Security PolicyAnti-malware and device protection.
• Operational Security BaselineScreen locking, passwords, MFA, and clear desk.
• Access Control PolicyLeast privilege and account lifecycle.
• Data Classification and Encryption PolicyData levels, handling rules, and encryption.
• Incident Response PolicyRoles, steps, timelines, and notification.
• Vulnerability and Threat Management ProcedureFinding, ranking, and fixing weaknesses.
• Personal Data Protection PolicyInternal rules for handling personal data.

Certifications

We hold no ISO 27001, ISO 27701, SOC 2 Type 2, or ePrivacy certification today.

Where we process data

We store and process personal data in the United States.