StandFast respects the privacy of our visitors, clients, and partners. This page explains, in plain language, what information we handle and how we treat it.
Effective: May 2026
Last updated: August 2026
StandFast is a product of MoGhraOps, LLC — a Service-Disabled Veteran-Owned Small Business providing framework-aware continuous assurance, security architecture, and practitioner-led cybersecurity services. Our website is primarily informational and is not designed as a consumer-facing platform or marketplace.
By default, this site collects very limited information:
We use information only for limited, mission-oriented purposes:
We do not sell, rent, or trade your personal information. Ever.
This site is designed to run with minimal or no third-party tracking. If analytics or additional tools are added in the future, this policy will be updated to describe exactly what is in use and how it operates — before those tools go live.
We build security infrastructure for a living. We apply that same security-first mindset to our own systems. While no system can be guaranteed perfectly secure, we apply reasonable technical and organizational safeguards to protect any information under our control.
Our website may contain links to external websites. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.
If you have questions about this Privacy Policy or how we handle information, reach us at:
Email: contact@moghraops.com
Mailing Address:
MoGhraOps, LLC
17350 State Hwy 249, Ste 220 #29269
Houston, TX 77064
How long we retain client data depends on what the data is and which rules govern it — not on a single fixed period. We retain each category of client data for as long as required by applicable law or regulation, the governing compliance framework or program, the client contract, and the type of information involved — and no longer than any applicable maximum or deletion requirement allows. Where more than one requirement applies, we retain the record for the longest applicable minimum, within any lawful maximum.
Different kinds of records follow different schedules. Raw operational telemetry, working intake, generated drafts, governed evidence, approved deliverables, audit records, exports, and incident-related material each carry a retention period appropriate to their kind and to the obligations that attach to them. The schedule that applies to an engagement is set out in, or referenced by, the client contract and remains subject to governing requirements.
Legal and incident holds. If records are subject to an authorized legal, regulatory, contractual, or incident-preservation hold, scheduled deletion is suspended for the scope and duration of that hold. A hold does not override an independent legal obligation to delete data; conflicts are resolved with appropriate authorization and legal review.
Export and disposition. Where provided by the client contract, we make an export available at the end of the engagement. Export and deletion are separate governed events. When a record reaches the end of its retention period and is not subject to a hold, we dispose of it according to our retention policy and record that disposition. Copies in routine backups may persist until those backups reach their own scheduled expiration.
As StandFast grows and the platform evolves, this Privacy Policy may be updated. When changes are made, the content on this page will be revised so the latest version is always available here, with the "Last updated" date above reflecting the current revision.
