Security & Compliance

We engineer the identity, access and audit systems that products need when they have to pass an outside review, whether that comes from a regulator, a government customer or a platform holder. The work covers data protection, data residency and government cloud requirements.

Yes. Terminal Velocity holds SOC 2 Type II and ISO/IEC 27001 certifications. Both are independent audits of how we handle security and data, which matters when our engineers work inside your systems or build services that store your customers' information.

Yes. We design systems that keep personal data in the places the law requires. For a foreign-owned game studio, we built and now operate a player identity service that isolates personal data, so the studio meets US government restrictions under CFIUS.

CFIUS is the US committee that reviews foreign investment in American companies for national security risks. When it approves a deal, it can require the company to limit who can access US users' personal data. We build the technical controls that put those limits in place and keep them running.

Yes. We migrated a simulation platform to AWS GovCloud at Impact Level 5 in seven weeks, meeting the deadline the client needed to keep a US Department of Defense contract. We build to the standards government cloud environments set for sensitive data.

Yes. We can hand a system over to your team with full documentation, or we can operate and support it ourselves. The player identity service we built for a studio's CFIUS compliance is one we still run.