Triuna Labs
Send a questionnaire
Data and access
Data categories and sensitivity, systems in scope, named access, location, retention, deletion and return of project material.
Security / Vendor review
Security information, up front.
A clear starting point for a Triuna Labs consulting review. Find the public company and policy answers here, then define the data, access, tools and terms for the work you are considering.
Reviewed October 24, 2026 Consulting vendor information
01 /Public information
02 /Engagement scope
03 /Direct response
Reusable answers
Company and public controls
These answers come from the linked public pages. They describe Triuna Labs and its published policies; they are not a completed response to a buyer's control questionnaire.
- Legal entity
- Triuna Labs, Inc. The company contact and mailing address are listed in the privacy policy.
- Consulting service
- AI workflow and system assessment, technical and process documentation, scoped implementation, and ongoing engineering support as agreed in a proposal. Work is led by Paul Woll. See the consulting overview.
- Engagement reporting
- The proposal defines the cadence and contents of work in progress reports, evidence packets and decision records. The client's approved workspace is preferred where access is permitted; permissions, retention and handoff are agreed for the engagement. See the illustrative report format.
- Security review contact
- Send consulting questionnaires and evidence requests to [email protected].
- Public website hosting
- The privacy policy identifies Cloudflare for website and application hosting, security, and email routing. A client's project environment and any additional providers must be identified for that engagement.
- Encryption in transit
- The privacy policy states that data is encrypted in transit using TLS.
- Production system access
- The privacy policy states that access to production systems is limited to authorized personnel. Client environment access is defined separately for each engagement.
- Initial inquiry data
- The consulting form requests name, email and a short description. Company, profile and phone details are optional. Do not include credentials or restricted datasets in an initial inquiry.
- Privacy and deletion requests
- The privacy policy explains general information use, service providers, retention and individual requests. Project material, retention and deletion requirements need to be addressed in the engagement terms.
For each engagement
Confirm before client access
A questionnaire answer about a consulting project should match the actual data flow and statement of work. These topics cannot be answered for every prospective client in advance.
Tools and third parties
Permitted development and AI tools, model providers, any subcontractors, and whether client material may be sent to them or used for model training.
Operating terms
Change approval, human review, incident notification, backup or recovery needs, insurance and any data processing agreement required for the work.
Assurance evidence
Request current policies, testing evidence or certifications your process requires. This page does not claim a SOC 2 report, ISO 27001 certification or independent audit.
Next step
Send the review with the proposed scope.
Include the questionnaire, the data classification, the systems that may be accessed and the date you need a response. We can then answer against the actual engagement and identify any documents that need a private exchange. Please keep credentials and restricted data out of the first email.