---
title: Security & Information Security Policy | Kenwood Solutions Group
description: "How Kenwood Solutions Group protects customer data: documented security policy, MFA and least-privilege access, encryption, secure development, and continuous monitoring."
---

[Skip to content](https://kenwoodsolutions.com/security#main)

[![KSG](https://kenwoodsolutions.com/hubfs/ksg-brand-2026/ksg-mark-navy.svg) Kenwood Solutions Group](https://kenwoodsolutions.com/?hsLang=en)

Menu

- [Products ▾](https://kenwoodsolutions.com/?hsLang=en#products) 
    - [RFS — The Production Hub](https://kenwoodsolutions.com/rfs?hsLang=en)
    - [SearchMedia.ai](https://kenwoodsolutions.com/searchmedia?hsLang=en)
    - [DigiRhino](https://kenwoodsolutions.com/digirhino?hsLang=en)
    - [Local Frontline — newsroom website](https://kenwoodsolutions.com/modern-newspaper?hsLang=en)
    - [Alexa for Publishers](https://kenwoodsolutions.com/alexa-newspaper?hsLang=en)
    - [Podcast Studio](https://kenwoodsolutions.com/ai-podcast?hsLang=en)
    - [Spotlight Pages](https://kenwoodsolutions.com/spotlight?hsLang=en)
    - [Marketing Assistant](https://kenwoodsolutions.com/marketing-assistant?hsLang=en)
- [Platforms ▾](https://kenwoodsolutions.com/?hsLang=en#platforms) 
    - [CivicHub360 — overview](https://kenwoodsolutions.com/civichub360?hsLang=en)
    - [CivicHub360.ai ↗](https://civichub360.ai)
    - [MyHometown.events — overview](https://kenwoodsolutions.com/myhometown?hsLang=en)
    - [MyHometown.events ↗](https://myhometown.events)
    - [Gather — business associations](https://kenwoodsolutions.com/gather?hsLang=en)
    - [Gather — plans & pricing](https://kenwoodsolutions.com/gather-pricing?hsLang=en)
    - [GrantsOS](https://kenwoodsolutions.com/grantsos?hsLang=en)
    - [CoWorkHQ — overview](https://kenwoodsolutions.com/coworkhq?hsLang=en)
    - [CoWorkHQ.org ↗](https://coworkhq.org)
    - [Frost Shop Marketplace](https://frostshopmarketplace.com)
    - [FilmComOS](https://kenwoodsolutions.com/filmcom?hsLang=en)
- [How we build](https://kenwoodsolutions.com/ai?hsLang=en)
- [Book a demo](https://kenwoodsolutions.com/contact?hsLang=en)

# Security at Kenwood Solutions Group

Information Security Policy summary · Version 1.0 · Effective September 28, 2026

Kenwood Solutions Group (KSG) maintains a documented information security policy, written procedures, and an operating security program that is monitored continuously. This page summarizes that program. It covers every KSG product and website, everyone who works on them, and the AI agents that assist our engineering and operations.

## Governance and accountability

- A named Security Owner, KSG's principal, is accountable for the policy and program and approves every exception.
- The policy is part of a register of binding internal standards covering secrets, secure development, database access, data classification, privacy, and accessibility. Every change to a standard is dated and recorded.
- The policy is reviewed at least once a year and after any significant incident or architecture change. The program itself is reviewed continuously through the monitoring described below.
- The policy is organized around the six functions of the NIST Cybersecurity Framework 2.0: Govern, Identify, Protect, Detect, Respond, and Recover.

## Access control

- Multi-factor authentication is required on every administrative account.
- Everyone uses a named, individual account. Shared logins are not allowed.
- Access follows least privilege: people and systems get only what their work requires.
- Contractors sign a confidentiality agreement before they get access, and their access is removed the day an engagement ends.
- Administrative and contractor access is reviewed at least quarterly.

## Data protection

- Data is encrypted in transit with TLS and encrypted at rest by our infrastructure providers.
- Customer data is protected by row-level access rules in our databases and by role-based permissions in our applications.
- We never store full payment card numbers. Payments are processed by Stripe.
- Financial account data received from a banking partner is handled server-side only, is never logged, and is never exposed to browser code.
- We do not sell customer data. See our [Privacy Policy](https://kenwoodsolutions.com/privacy?hsLang=en).

## Secrets management

- Credentials and API keys are held in a dedicated secrets manager and injected at runtime. They are never stored in source code, documents, or messages.
- Automated checks on our core platforms block any code change that contains a credential.
- Credential rotation requires approval from the Security Owner.

## Secure development and change management

- Every change is made on a separate branch and reaches production only through a pull request. Production branches on our core platforms are protected against direct pushes and deletion.
- Automated checks run on every change to our core platforms: credential scanning, static code analysis, type checking, and dependency auditing. We are extending the same checks to every KSG codebase.
- Database changes are versioned and reviewed. Database permissions are verified after every change, not assumed.
- Production releases are gated by automated build and test checks and can be rolled back.
- Dependencies are updated on a weekly schedule, and security advisories for our technology stack are reviewed daily.

## Continuous monitoring

- Automated scans run on every code change and on a weekly schedule.
- A nightly database sweep checks access rules and permissions against approved baselines.
- A daily security review checks for permission drift, provider security advisories, supply-chain alerts, and production deployment health.
- A weekly audit confirms that live systems still match our documented standards.
- Every monitoring run is logged with its date and findings. Monitoring detects, alerts, and proposes fixes; a person approves every production change.

## AI agent safeguards

KSG uses AI agents for engineering and monitoring work under explicit rules. Agents never handle credential values, cannot expand their own permissions, and cannot move money, delete data, change accounts or DNS, or contact customers without a human decision.

## Incident response

KSG maintains a written incident response procedure: report, triage, contain, recover, notify, and learn. Affected customers and partners are notified without undue delay and within any timeframe required by law or contract. Every incident is logged with its root cause and the control added to prevent it from recurring.

## Backup and recovery

- Production databases use provider-managed backups.
- A versioned, encrypted, append-only archive receives a nightly off-site backup.
- Application releases can be rolled back in minutes.

## Infrastructure and vendors

KSG runs on established providers that maintain independent security attestations, including Amazon Web Services, Supabase, Vercel, Stripe, Cloudflare, HubSpot, and Google Workspace. New vendors that will hold customer data are reviewed before adoption.

## Compliance status

KSG is not yet SOC 2 attested or ISO 27001 certified. Our controls are documented so they can be mapped to those frameworks. We complete security questionnaires and support architecture reviews for customers and partners on request.

## Report a security concern

To report a vulnerability or security concern, or to request our full policy or a security questionnaire, email [Support@KenwoodSolutions.com](mailto:Support@KenwoodSolutions.com?subject=Security) with "Security" in the subject line. Please do not include sensitive data in your first message.

© 2026 Kenwood Solutions Group. All rights reserved. — Information Security Policy summary (v1.0, 2026-09-28)

![KSG](https://kenwoodsolutions.com/hubfs/ksg-brand-2026/ksg-mark-white.svg)

Kenwood Solutions Group · 5008 Highway 140, Mariposa, CA 95338. Software for newsrooms, communities, and Main Street.

[(209) 200-4140](tel:+12092004140) [connect@kenwoodsolutions.com](mailto:connect@kenwoodsolutions.com)

### Products

- [RFS](https://kenwoodsolutions.com/rfs?hsLang=en)
- [SearchMedia.ai](https://kenwoodsolutions.com/searchmedia?hsLang=en)
- [DigiRhino](https://kenwoodsolutions.com/digirhino?hsLang=en)
- [Local Frontline](https://kenwoodsolutions.com/modern-newspaper?hsLang=en)
- [Alexa for Publishers](https://kenwoodsolutions.com/alexa-newspaper?hsLang=en)
- [Podcast Studio](https://kenwoodsolutions.com/ai-podcast?hsLang=en)
- [Spotlight Pages](https://kenwoodsolutions.com/spotlight?hsLang=en)
- [Marketing Assistant](https://kenwoodsolutions.com/marketing-assistant?hsLang=en)

### Platforms

- [CivicHub360 — overview](https://kenwoodsolutions.com/civichub360?hsLang=en)
- [CivicHub360.ai ↗](https://civichub360.ai)
- [MyHometown.events — overview](https://kenwoodsolutions.com/myhometown?hsLang=en)
- [MyHometown.events ↗](https://myhometown.events)
- [Gather — business associations](https://kenwoodsolutions.com/gather?hsLang=en)
- [Gather — plans & pricing](https://kenwoodsolutions.com/gather-pricing?hsLang=en)
- [GrantsOS](https://kenwoodsolutions.com/grantsos?hsLang=en)
- [CoWorkHQ — overview](https://kenwoodsolutions.com/coworkhq?hsLang=en)
- [CoWorkHQ.org ↗](https://coworkhq.org)
- [Frost Shop Marketplace](https://frostshopmarketplace.com)
- [FilmComOS](https://kenwoodsolutions.com/filmcom?hsLang=en)

### Company

- [How we build](https://kenwoodsolutions.com/ai?hsLang=en)
- [Contact](https://kenwoodsolutions.com/contact?hsLang=en)
- [Privacy](https://kenwoodsolutions.com/privacy?hsLang=en)
- [Terms](https://kenwoodsolutions.com/terms?hsLang=en)
- [SMS policy](https://kenwoodsolutions.com/sms-policy?hsLang=en)

© 2026 Kenwood Solutions Group. All rights reserved. Built in Mariposa, CA · Accessible by design