TRIUNA LABS CONSULTING — GENERAL VENDOR REVIEW ANSWERS
Reviewed: 24 October 2026
Website: https://triunalabs.com/consulting/
Contact: paulwoll@triunalabs.com

This is a starting sheet for procurement and security teams. It is not a
completed client questionnaire, security attestation, or contract. Answers
about a specific project must match its statement of work, data flow, tools,
access, and terms.

COMPANY AND SERVICE
Legal entity: Triuna Labs, Inc.
Consulting lead: Paul Woll, founder and principal architect.
Services: AI system and workflow assessment, technical and process
documentation, scoped implementation, and ongoing engineering support, as
agreed in a proposal.
Company contact and mailing address: https://triunalabs.com/privacy/

PUBLIC SECURITY AND PRIVACY INFORMATION
Privacy policy: https://triunalabs.com/privacy/
Public website and application hosting, security, and email routing:
Cloudflare is identified in the privacy policy. Client project providers are
identified for each engagement.
Encryption in transit: The privacy policy states that data is encrypted in
transit using TLS.
Production access: The privacy policy states that production system access
is limited to authorized personnel. Client environment access is agreed
separately for each engagement.
Initial inquiries: Please send a short business description. Do not include
credentials or restricted datasets in the consulting form or first email.

ENGAGEMENT-SPECIFIC ANSWERS TO CONFIRM BEFORE ACCESS
- Data categories, sensitivity, permitted processing, and system boundaries.
- Named access, location of code and reports, client approvals, and revocation.
- Development and AI tools, model providers, and any third parties.
- Whether client material may be sent to a provider or used for model training.
- Reporting cadence, evidence packets, decision records, and handoff format.
- Retention, deletion or return of project material.
- Change approval, human review, incident notification, and recovery needs.
- Insurance, data processing terms, and assurance documents required by buyer.

Triuna Labs does not claim a SOC 2 report, ISO 27001 certification, or
independent audit on the public vendor-review page. Request current evidence
directly if your review requires it.

Questionnaires and evidence requests: paulwoll@triunalabs.com
Public review page: https://triunalabs.com/consulting/security/