Security & Data Sovereignty
Institutional protocols for data protection, security controls, and telemetry auditing under Project AEGIS.
Document Metadata
Institutional Trust Statement
Six Nine Construction operates under the highest parameters of execution precision, extending not only to physical concrete and steel but to digital architectures. As operators of Project AEGIS, our proprietary infrastructure command center, we treat client, supplier, and contractor data as highly sensitive, critical industrial assets.
This policy outlines our programmatic and organizational commitments to data security, telemetry sovereignty, and strict compliance with national and regional data protection frameworks.
Data Security & Cryptographic Isolation
SNC implements enterprise-grade physical and cryptographic controls to secure operational records, contractor documents, and structural telemetry from unauthorized intrusion.
Encryption Standards
All data in transit is encrypted using transport layer security (TLS 1.3). Data at rest within our servers and database clusters is encrypted using AES-256 with key rotation cycles managed via HSMs.
Zero-Trust Network Architecture
Project AEGIS operates on isolated VPC networks, protecting client tender databases and financial records behind adaptive multi-factor authentication (MFA) and strict role-based access control (RBAC).
Compliance & Security Audits
We validate our technical controls through routine, independent third-party audits and rigorous testing parameters. Our platforms are designed to align with international safety and security frameworks.
Audit Protocols & Verification
SOC 2 Type II Compliance
SNC undergoes annual independent audits covering security, availability, and processing integrity of the Project AEGIS system.
Penetration Testing
Semi-annual white-box and black-box penetration assessments are conducted by CREST-accredited security engineers.
ISO 27001 Alignment
Our Information Security Management System (ISMS) operates in strict conformity with the ISO/IEC 27001:2022 international standard.
Platform Telemetry & Logging
Project AEGIS tracks real-time platform actions to compile permanent audit trails, ensure operational accountability, and prevent fraudulent procurement actions.
The following log structures are generated continuously and retained for a minimum of 7 years in compliance with corporate engineering regulations:
| TELEMETRY TYPE | DATA POINT EXAMPLES | ENCRYPTION STATUS |
|---|---|---|
| ACCESS LOGS | IP Address, MFA Challenge Timestamps, User Agent | AES-256-ROTATED |
| TENDER AUDITS | Bid-bond verification hashes, timestamped proposal submissions | SHA-256 INTEGRITY |
| SYSTEM TELEMETRY | API latency parameters, query payloads, database state checks | ANONYMIZED |
| OPERATIONAL LOGS | Contractor check-ins, plant dispatch coordination requests | AES-256 |
Stakeholder & User Rights
We guarantee transparency and control to all registered portal users, commercial partners, and contractors. You have direct control over your digital footprint on the AEGIS platform.
Right to Inspect
Request full structural transcripts of all corporate records and personal telemetry stored on our systems.
Right to Restrict
Disable optional system telemetry tracking and pipeline automations tied to your contractor profile.
Right to Purge
Initiate formal requests to delete profile records, subject to regulatory tax and engineering archival laws.
Regulatory Alignments
SNC operates globally, adapting its compliance postures to satisfy regional data protection statutes:
Zimbabwe Cyber Security & Data Protection Act [Chapter 12:07]
Full compliance with the statutory rules regulating data controllers, trans-border data streams, and systemic disclosure events.
SADC Model Law on Data Protection
Ensuring aligned cross-border data transfer security parameters for projects spanning Zambia, Mozambique, and South Africa.
EU General Data Protection Regulation (GDPR)
Adhering to strict European security controls for international capital sponsors and joint-venture partners operating in the region.