Trust Center
Compliance, security, and accountability in one place.
Everything procurement officers, security teams, and prospects ask about how we operate. Privacy, security, AI usage, accessibility, cookies, terms, and the third parties we work with.
Last updated: May 2026 · OpenSource Technologies, Inc., a Pennsylvania corporation
Our policies
Privacy, security, AI usage, accessibility, cookies, terms.
Each policy is published as its own page. Click through for the full statement.
Privacy Policy
How we collect, use, store, and delete personal data. GDPR and CCPA aligned. Data subject rights, retention periods, and request paths.
Security
Infrastructure controls, access management, encryption practices, vulnerability response, and incident playbooks. SOC 2 alignment on request for procurement.
AI Usage Policy
Which AI tools we use, when we use them, and how we honor client AI policies. Includes our default tool list (Claude Code, Cursor, Codex, Copilot) and the no-AI delivery option for restricted projects.
Accessibility Statement
WCAG 2.2 AA conformance approach, Section 508 alignment, testing methodology, known issues, and how to report a barrier. Applies to ost.agency and platforms we deliver.
Cookie Policy
Every cookie this website sets, what it does, how long it persists, and how to opt out. Strictly necessary, analytics, and preference categories explained separately.
Terms of Service
Terms governing use of ost.agency, our content, and any tools we make available publicly. Separate from engagement-specific contracts (those have their own terms in the SOW).
Sub-processor List
Third parties that process data on our behalf or our clients' behalf. Hosting, email, analytics, communication tools. Updated when we add or remove a vendor.
Capability Statement
For procurement officers and prime contractors. Past performance, key personnel, and codes/compliance overview. Federal procurement codes (SAM UEI, NAICS, CAGE) available on request. PDF-printable.
Frameworks & standards
Compliance we support, scoped per engagement.
Frameworks we have experience implementing when contracted to do so. Specific compliance is scoped in your contract or SOW based on what your project actually requires.
Specific compliance question?
Reach Shaili Gupta directly.
Procurement officers needing a specific policy clause, security audit response, or data processing addendum can route through the contact form. Replies from Shaili Gupta, President, within 1 business day.