CDS SECURITY
Real Protection. Real accountability.
Zero compromises.
Security is the infrastructure behind every real result we deliver.
SECURITY Overview
At Complete Discovery Source, Inc., security isn’t an add-on.
It’s the foundation of how we design, operationalize, and support every solution for our clients. From data staging through ingestion, processing, production, and retention within SaaS platforms, our practices are engineered to protect the security, integrity, availability, confidentiality, and privacy of your data at every step.
Secure by Design
We employ a defense-in-depth architecture to protect client data across its full lifecycle, from ingestion through retention and secure disposition. Our approach combines technical controls, disciplined operational procedures, and continuous monitoring to deliver security and privacy of client data at the highest standards.
Security oversight is embedded across executive leadership, engineering, and operations. Controls are documented, independently audited, and continuously reviewed to meet the expectations of enterprise clients, government agencies, and regulated industries.
The First FedRAMP Authorization in eDiscovery
Complete Discovery Source, Inc. sets the benchmark for security in the eDiscovery industry as the first provider to achieve an Authorization to Operate (ATO) under the Federal Risk and Authorization Management Program (FedRAMP). FedRAMP ATO is the security-based approval necessary to host Controlled Unclassified Information (CUI) and other sensitive data on behalf of U.S. federal agencies. This achievement demonstrates our ability to operate securely and meet the most rigorous of security standards.
CORE CERTIFICATIONS
Independently Audited, Compliant & Certified.
We maintain certifications that demonstrate disciplined, verifiable security practices across our organization.
ISO/IEC 27001:2022
Our independently audited ISO 27001-certified information security management system reflects a structured approach to risk management, data protection, and continuous improvement.
SOC 2 Type 2
Independently audited SOC 2 controls govern our production and disaster recovery environments, validating our operational security, integrity, availability, confidentiality, and privacy controls.
Cyber Essentials Plus
Independent verification that our systems meet robust security standards in compliance with handling and protecting sensitive government data and maintaining trusted supplier status.
These controls complement the security of leading eDiscovery cloud platforms, such as RelativityOne and RelativityOne Gov, creating a comprehensive, layered, defense-in-depth approach to servicing client data.
Global Compliance Across Industries
We align with established global and U.S. regulatory standards to support our clients’ compliance obligations.
GDPR
Controls support secure handling of personal data, including workflows for redaction, anonymization, and cross-border data transfers.
PCI
We maintain security controls aligned with PCI standards to protect payment card information and reduce the risk of data breaches involving financial transactions.
CCPA and Evolving State Privacy Laws
CDS complies with the California Consumer Privacy Act (CCPA) and closely monitors evolving U.S. state and federal privacy laws. Our processes are designed to support clients in meeting their obligations related to consumer data rights and transparency.
GLBA
For clients in the banking and financial sectors, CDS supports compliance with the Gramm-Leach-Bliley Act (GLBA) through strict controls that protect nonpublic personal financial information.
PHI / HIPAA
CDS safeguards protected health information (PHI) in accordance with HIPAA requirements. As a Business Associate, we implement administrative, technical, and physical safeguards to ensure the confidentiality and integrity of healthcare-related data.
ITAR
CDS offers secure environments capable of supporting ITAR requirements, enabling clients with export-controlled matters to host data in compliance with applicable regulations.
NIST 800-171
We align our security controls with NIST 800-171 requirements to support clients in the defense and government sectors who require enhanced protection of sensitive information
Why CDS Security Is Unparalleled
Security isn’t just about compliance, it’s about trust earned through consistent execution.
Whether we’re processing discovery data, staging it for analysis, or moving it securely to cloud systems, our approach ensures:
Security, integrity, availability, confidentiality, and privacy
Data control, process visibility, and client transparency
Predictable, resilient, and scalable operations
When clients trust us with their most sensitive information, we treat that responsibility as non-negotiable.