Security at Rickland

Last updated: October 4, 2026

Our clients trust us with their customer lists and mailings. This page describes, at a high level, how Rickland, LLC protects that information and how to contact us about security.

1. Our security program

Rickland maintains a written information security program based on documented policies that are reviewed at least once a year. A designated Security & Privacy Officer runs the program, and company leadership oversees it and reviews it regularly.

2. Independent assessment

We are preparing for an independent SOC 2 Type II examination covering the Security, Availability and Confidentiality criteria. We will update this page when the report is available. Clients can request information about our controls at any time (see section 9).

3. Protecting client data

• Client files are exchanged through our secure file transfer service, and this Site is served only over encrypted HTTPS connections.
• Client data is used only to perform the work the client requested and is retained and securely disposed of on a defined schedule.
• Printed material containing client data is destroyed securely when it is no longer needed.
• Mailing jobs are checked against the client file before release, using barcode verification on our inserting equipment where the job calls for it.

4. Access control

• Multi-factor authentication is required for company accounts.
• Access to systems and client data is granted on a least-privilege basis, and privileged access is reviewed regularly.
• Access is removed promptly when someone leaves or changes role.

5. Devices and systems

• Company computers are centrally managed, kept up to date with security patches, and protected with endpoint security software.
• Computer hard drives are encrypted.
• Our network is protected by a managed firewall with intrusion prevention.

6. People and facilities

• Employees complete background screening, sign confidentiality agreements and take security awareness training.
• Our production facility uses controlled entry and camera monitoring, and visitors are escorted.

7. Resilience and incident response

• Business data is backed up, and we maintain a disaster recovery plan with an offsite recovery partner.
• We follow a documented incident response process and will notify affected clients as our agreements and the law require.

8. Service providers

We assess service providers that handle client data and require them to protect it appropriately.

9. Security questions and reporting a vulnerability

Clients and prospects with security questionnaires or questions about our controls can contact security@ricklanddirect.com.

If you believe you have found a security vulnerability in this Site or our services, please email security@ricklanddirect.com with enough detail for us to reproduce it. Please do not access or change data that does not belong to you, disrupt our services, or publicly disclose the issue before we have had a reasonable chance to address it. We will acknowledge reports and keep you informed of our progress. Our security contact details are also published at www.ricklanddirect.com/.well-known/security.txt.