1. Website and engagement scope
TFMG provides technology consulting and services across digital transformation, AI and data analytics, cloud infrastructure, cybersecurity, and IT strategy. This page explains the scope of security and compliance information for tfmg.streamwalkers.com and its restricted business workspaces.
This page is not a certification or audit report. It does not assert that TFMG or this website is SOC 2 certified, ISO 27001 or ISO 42001 certified, FedRAMP authorized, CMMC assessed, or approved for regulated data. A supplier’s certification does not automatically certify TFMG or a client solution.
2. Access and website safeguards
- Encrypted transport: the website is served over HTTPS.
- Restricted administration: contracting and growth workspaces require authorized access.
- Account controls: the administration application uses password hashing and role-based permissions, with additional contract-level access controls.
- Session protection: admin session cookies use Secure, HttpOnly, and SameSite attributes; protected responses use cache-control restrictions.
- Application checks: administration includes checks on authenticated requests and records selected sign-in and administrative events.
These controls have defined technical scope. They are not a promise of continuous monitoring, an independent penetration test, a particular recovery time, or a guarantee against every security incident.
3. Information handling
Use the public contact process for ordinary business inquiries. Arrange an approved channel and written handling requirements before sending confidential client records, sensitive personal information, classified material, or controlled unclassified information (CUI). The public site and general business workspaces must not be treated as approved repositories for those materials.
Authorized workspace users should enter only information they are permitted to process and share. Access must be appropriate to the business purpose. Client confidentiality, retention, data residency, and other special requirements belong in the applicable engagement documents.
See the Privacy Policy for the website’s contact process, session technologies, information categories, and privacy-request channel.
4. Contract-specific compliance
Requirements such as NIST controls, government contract clauses, CMMC, FedRAMP, HIPAA, PCI DSS, or client-specific security standards depend on the actual service, data, system boundary, contract, and assessment. They are not established by a website description or a reference to a framework.
Before an engagement, the parties should identify applicable requirements, responsibilities, evidence, approved systems, subcontractor obligations, and any required assessment or authorization. Do not rely on this website as evidence of an award, clearance, authorization, certification, or eligibility for a procurement.
5. AI, concepts, and human review
The website includes AI-generated or digitally produced imagery and video illustrating concepts of work, technology, and future environments. These visuals do not establish that TFMG owns, operates, or has delivered the depicted facilities, spacecraft, equipment, or systems.
AI-assisted material, business projections, and planning outputs require human review before use. They may be incomplete or inaccurate and are not guarantees of revenue, contract awards, technical performance, or future results. Any AI processing of client or confidential information must be governed by the relevant authorization and engagement requirements.
6. Report a security concern
Email info@tfmg.ai with the subject Security concern — TFMG website. Include the affected URL, a short description, and non-sensitive steps to reproduce the issue. Do not include passwords, access tokens, personal records, or confidential documents in an initial email.
A reporting channel is not authorization to access other people’s data, disrupt services, bypass access controls, or conduct intrusive testing. Coordinate testing scope with TFMG before proceeding. This page does not create a bug-bounty program or promise a reward or response deadline.
7. Updates and contact
Website features and safeguards may change. This page describes the published website scope as of the date above; a signed engagement agreement governs any specific service commitment. Contact info@tfmg.ai for current information relevant to a proposed engagement.