Certified
ISO 27001 and SOC 2 Type II, independently audited.
Tested
Independent penetration testing conducted annually.
Governed
Least-privilege access, segregated by engagement.
Blue Ops Partners is ISO 27001 and SOC 2 Type II certified, firm wide.
Our Firm
Certification isn’t something we bolted onto a product; it’s how the firm operates, across every engagement, every sector, every team.
Retention and Deletion
Data is kept only as long as the engagement needs it, then permanently deleted.
Access
Control
Access is granted on a least privilege basis and revoked promptly when someone rolls off.
Personnel
Checks
Every team member is background-checked and trained before accessing deal data.
Incident
Response
Clients are notified promptly if a security incident is confirmed.
Insurance
Protected
Backed by cyber liability coverage.
Powered by SMITH, built with our technology partners EBM Software and XGS.ai.
Our Technology
We don’t build our own AI infrastructure from scratch, and we don’t think you’d want us to. Instead, every engagement runs on SMITH, a platform built for exactly this kind of sensitive, high-stakes data, developed by our partners at EBM Software and XGS.ai.
- Certified at the platform level.
SMITH holds both ISO 27001 and SOC 2 Type II certification. - Your data stays yours.
Client data is never used to train any model, ours or anyone else’s. - Governed, not open.
Every AI interaction runs through a single governed gateway, not a patchwork of ungoverned tools, so every query is auditable and every result is traceable back to your own data. - Hosted where you need it.
Data hosting location is available on request.

Security
by the Numbers
0
PHI or PII data handled
Annual
Independent Penetration Testing
100%
Staff Security Training