Protect customer information with controlled staff and administrator access
Secure staff accounts, email, and devices, with clearly defined responsibilities for billing, provisioning, and network systems.
Or email hello@teclara.tech
Security risks
Review access when staff and partner roles change.
Staff, partners, and administrators may need access to several systems. We protect the Microsoft 365 or Google Workspace accounts and supported devices covered by the service.
New support staff
Give support staff appropriate access
New support staff need access to the customer records required for their role. Named accounts with role-based permissions make access easier to review and remove when responsibilities change.
Partners and resellers
Manage partner and contractor access
Channel partners and contractors often get shared folders or guest accounts. Regular reviews identify guest accounts that are no longer needed.
Account changes
A caller asks to change a customer account
Social engineering aimed at support staff is how SIM swap and porting fraud often begins. Training helps staff recognize these attempts. Your support team remains responsible for verifying customer requests.
After an incident
Review which records were accessed
Retain sign-in, mailbox, and file-access logs so investigators can review activity leading up to an incident.
Security controls
A support account can reach more than one customer
The initial review identifies who has administrator access, where customer information is stored, and which systems are covered by Managed Security & Compliance.
Identity
Limit administrator access
Protect Microsoft 365 or Google Workspace administrator accounts with multi-factor authentication, role limits, and sign-in monitoring.
Customers
Control access to customer records
Review who can access customer files, support conversations, and shared documents in the cloud tenant. Billing, ticketing, and subscriber databases need their own access and retention decisions.
Support
Remove access when roles change
Staff, contractors, and partners use individual accounts where supported. When they leave, we disable those accounts, revoke sessions, and remove shared access from the systems we manage.
Devices
Protect supported staff devices
Supported laptops and phones covered by the service receive managed endpoint protection, encryption, and security updates. The security team investigates alerts and escalates them under the agreed response process.
Email
Reduce account and domain impersonation
Email filtering, sign-in controls, and domain authentication help protect customer communications and internal requests. Changes to sensitive customer or payment details still need an independent verification process.
Recovery
Test recovery for cloud data
Microsoft 365 or Google Workspace data covered by your backup agreement is backed up independently and tested for recovery.
Security documentation
Maintain records for privacy, customer, and insurance reviews.
Telecom providers under federal jurisdiction are covered by PIPEDA for customer and employee information, including its breach record-keeping requirements.
- Office of the Privacy Commissioner
- Can you produce your record of every breach of security safeguards from the last 24 months?
- Alert, investigation, and response records for the agreed systems support your required breach records.
- Business customers
- Who at your company can see our account information, and how is that access controlled?
- The access model for customer folders and shared mailboxes, MFA coverage, and offboarding records for staff and partners.
- Cyber insurer, at renewal
- Is MFA enforced for administrators and support staff? Are backups tested?
- MFA and administrator role reports, device coverage, and the backup scope with the last restore test.
Your responsibilities
The provider decides which customer information rules, contracts, regulatory duties, and notification requirements apply to its services. Teclara operates and documents the security controls included in your agreement. Network, voice, and service infrastructure, subscriber, billing, and provisioning platforms, and regulatory interpretation require separate owners and written scope.
Managed Security & Compliance
Ongoing security for your accounts, devices, and data.
The security controls on this page run on the platform you use, with access controls, reporting, and maintenance schedules adapted to your provider.
On Microsoft 365
- MFA, Conditional Access, and administrator role review
- SharePoint, OneDrive, and support mailbox access controls
- Managed endpoint protection on supported staff devices
- Sign-in and sharing records retained for review
On Google Workspace
- MFA and administrator access controls
- Gmail phishing and impersonation protection
- Shared-drive and external-sharing reviews
- Admin and sign-in records retained for review
Configuration updates are part of the service. When our security baseline changes, your environment is updated without a separate project fee.
Included security services
- Staff identities, email, files, and sharing in Microsoft 365 or Google Workspace.
- Supported staff devices, cloud backup, monitoring, and written control records.
Services we assess separately
- Billing, ticketing, subscriber, and provisioning platforms, including their administrator access and recovery.
- Carrier core, routing, switching, voice, radio, and field infrastructure.
Frequently asked questions.
Can Teclara secure our carrier network?
Managed Security & Compliance covers Microsoft 365 or Google Workspace, supported staff devices, email, cloud backup, and the controls included in your agreement. Routing, switching, voice, radio, and other carrier infrastructure require a separate assessment, owner, and written scope. We will identify those boundaries during the risk review.
What about billing and provisioning systems?
During the initial review, we identify who administers those systems and how staff sign in. Changes, monitoring, backup, and response inside each billing or provisioning platform are included only if its access, technical requirements, and responsibilities are agreed separately.
How do you protect customer information?
We review access to customer files, support mailboxes, and shared documents in the managed cloud tenant. Sign-in controls, staff-device protection, offboarding, and backup can then be applied to the systems covered by your agreement. Subscriber databases and ticketing platforms require separate security controls and assigned responsibilities.
Can you provide evidence for customer or insurance reviews?
Yes. Reporting can document the controls Teclara operates, including administrator access, sign-in policies, supported-device coverage, backup and restore tests, and alert handling. The provider remains responsible for its answers, contracts, insurance application, and regulatory conclusions.
What happens when a security alert is raised after hours?
The security team reviews alerts and follows the agreed response and escalation process around the clock. Available containment actions depend on the systems covered, available access, and authorized response actions. The provider keeps responsibility for service continuity and any required customer or regulator notifications.
Where we work
We're based in Oakville and work remotely across the region.
Each area page explains how delivery works there. We don't keep offices outside Oakville, so where you're located doesn't limit what we can support.
Short on time? Let your favourite AI sum up Teclara.
Review access to customer records and service tools
In a 30-minute conversation, we discuss staff access, customer records, and the systems your service relies on. We agree on the next step. Technical checks and written findings belong to a separately scoped engagement.