Cloud & security

Pass the security review and close the enterprise deal.

Enterprise buyers send security questionnaires before they sign. We build the controls they ask for into your product, and produce the technical evidence your auditors and customers need, from UK GDPR to ISO 27001, SOC 2 and the EU AI Act.

Security & compliance engineering
3–10 weeks

Start a project Talk to us

When to call us

Sound familiar?

01
A large customer sent a security questionnaire you cannot fully answer.
02
A penetration test came back with findings you need fixed quickly.
03
Your product uses AI for hiring, credit or other high-risk decisions in the EU.

How Tulmira handles it

Our approach, step by step

1
Gap assessment
We map your product against the framework or questionnaire you face and list exactly what is missing.
2
Threat model
A written threat model of your system, so effort goes where real attackers would.
3
Build the controls
SSO and SCIM, role-based access, audit logs, encryption, secrets management and secure pipelines.
4
Evidence and handover
Policies, diagrams and automated evidence collection, ready for auditors and customer reviews.

Our standards

Non-negotiable practices

Threat modelling before security work starts
Encryption in transit and at rest by default
Audit logs that record who did what, and when
Dependency and container scanning on every build
Data protection impact assessments for personal data
AI systems documented for EU AI Act risk classification

What you get

Gap assessment and prioritised remediation plan
Enterprise security features: SSO, SCIM, roles and audit logs
Remediated penetration-test findings
Technical documentation and evidence for audits

Tools we use for this

OAuth 2.1
SAML
OpenID Connect
Vault
Snyk
AWS KMS

Proof

Built the same way we build our own products

PulsVault

Security

PulsVault's zero-knowledge encryption and published threat model show how we approach security by design.

See PulsVault →

FAQ

Common questions

Anything else, ask us directly.

Certification is granted by independent auditors. We build the technical controls and evidence they assess, and work alongside your compliance partner.