PEO IT SOLUTIONS · COMPANY POLICIES
Service Policies
Clear information for a professional working relationship.
1. Engagement and authorization
Services begin after the customer approves a written proposal, work order, or statement of work describing the authorized systems, deliverables, exclusions, fees, and project contacts. PEO IT SOLUTIONS will not test, scan, or change systems without appropriate authorization.
2. Scope and change requests
Work outside the approved scope, including added devices, new sites, emergency response, or material architecture changes, requires documented approval and may affect pricing or timelines.
3. Customer responsibilities
Customers must provide accurate system information, necessary access permissions, licensing, designated contacts, and verified backups where appropriate. The customer retains responsibility for business decisions, regulatory obligations, and approval of material production changes.
4. Security and access
We apply least-privilege access where practical, use appropriate authentication, and handle credentials through approved secure channels. Remote access, VPN configuration, firewall rules, IDS/IPS, DLP, and cloud changes are implemented only within the agreed scope. Credentials should not be sent by ordinary email.
5. Cloud and third-party platforms
Cloud services may generate ongoing charges billed directly by the provider. The customer remains responsible for cloud subscriptions and third-party licensing unless a signed agreement says otherwise. cloud and other providers operate under their own terms and shared-responsibility models.
6. Backups, maintenance, and changes
Before potentially disruptive work, we will discuss appropriate backup, rollback, and maintenance-window arrangements. A backup or disaster-recovery service is not included unless explicitly specified. No security configuration can eliminate all risks.
7. Incident response and sensitive data
Suspected security incidents should be reported promptly through the agreed contact method. Incident investigation, forensic services, regulated-data handling, and 24/7 monitoring are not included unless expressly contracted. Special data-protection terms may be needed for healthcare or other regulated environments.
8. Support availability and response times
Business hours, response targets, emergency coverage, service-level commitments, and escalation procedures are established per contract. This website does not promise 24/7 availability or a guaranteed resolution time.
9. Deliverables and completion
Completion criteria, documentation, testing, acceptance, and any post-project support period will be identified in the signed work order. Customers should review deliverables and report issues within the agreed acceptance period.
10. Billing, cancellation, and disputes
Deposits, hourly rates, milestones, travel charges, cancellation fees, and payment terms must be specified in the written agreement. Refund and cancellation treatment is described in the Refund & Cancellation Policy, subject to any signed agreement and applicable law.