1. What this statement is
This statement explains GC Total’s security and data-handling approach, security-reporting path, and accessibility commitment. It is not a certification, audit report, warranty, penetration-test attestation, or promise that an incident or accessibility barrier will never occur.
2. Security and data-handling model
GC Total uses safeguards appropriate to the service and the information it handles, including:
- organization, project, division, role, and user Access Scopes;
- Organization Allowlists and authenticated Client Directions;
- unchanged Quarantined Originals with source, time, scope, type, size, and hash records;
- validation and malware scanning before ordinary processing;
- a Sensitive-Document Gate before parsing, external-provider use, workbook generation, or download exposure;
- provider and storage routing constrained by the Data Handling Profile;
- append-only project, processing, direction, correction, and delivery audits;
- the retention, deletion, Legal Hold, and no-retention treatment in the Privacy and Data Notice; and
- incident escalation and customer notice as required by contract and law.
GC Total reviews the controls required for a route before enabling that route for customer processing and narrows this statement if a control is not supported by the deployed service.
GC Total does not claim SOC 2, ISO 27001, FedRAMP, CMMC, CJIS, HIPAA, or PCI DSS compliance; a penetration-testing frequency; a breach-free record; guaranteed encryption; or a particular data-residency location. A provider’s certification does not certify GC Total.
Report security concerns to legal@gctotal.com with enough information to identify the service and issue, but do not send credentials, payment-card data, exploit code, or restricted project documents by ordinary email. GC Total will arrange a more secure transfer method when sensitive details are needed.
3. Accessibility commitment
GC Total targets Web Content Accessibility Guidelines 2.2 Level AA for its public website and client-facing web application. This is a target, not a claim of certified or complete conformance. GC Total will test new client-facing material against that target, prioritize fixes by user impact, and disclose known material limitations honestly.
A person who encounters a barrier may contact legal@gctotal.com and identify the page or feature, attempted task, barrier, assistive technology, and preferred response method. GC Total will acknowledge the request within five business days. While evaluating remediation, it will provide a reasonable alternative way to obtain the information or complete the task.
GC Total has not certified complete WCAG 2.2 Level AA conformance. Known material barriers will be prioritized and described honestly until corrected.