AI and Technology Disclosure

Bridgham Cyber is a cybersecurity firm for regulated and semi-regulated firms from 400 to 1,000 employees. Our platform combines automated monitoring, AI-assisted analysis, and human oversight to help organizations assess, improve, and maintain their security posture. The following is a summary of the services we provide.

• ·Security posture assessment and documentation. We evaluate an organization's current security controls, identify gaps, and produce documentation summarizing the findings.
• ·Policy development and customization. We draft and tailor security policies, acceptable use policies, incident response plans, and related governance documents to fit each client's operational environment.
• ·Regulatory compliance alignment. We map client security controls against recognized frameworks including NIST CSF, SOC 2, and ISO 27001 to identify gaps and support audit readiness.
• ·Continuous threat monitoring. Automated systems monitor threat intelligence feeds from third-party security data providers to detect potential threats relevant to client infrastructure.
• ·DNS-layer security filtering. We configure and manage DNS-level filtering to block access to known malicious domains, phishing sites, and other harmful destinations.
• ·Endpoint protection advisory. We provide guidance on selecting, deploying, and configuring endpoint protection solutions appropriate to the client's environment.
• ·Multi-factor authentication implementation guidance. We assist clients in selecting and deploying industry-standard authentication protocols across their critical systems and user accounts.
• ·Data breach detection and notification. Automated systems monitor for client credential exposure and data breach events across publicly available databases and threat intelligence sources.
• ·Password security management. We provide guidance on password policy enforcement and assist with the deployment of enterprise password management solutions.
• ·Incident response coordination. In the event of a security incident, we coordinate containment, investigation, and recovery activities in collaboration with the client's internal team.
• ·Quarterly business reviews and security briefs. We deliver periodic reports summarizing security posture changes, completed recommendations, emerging threats, and planned next steps.
• ·Annual security posture reporting. A comprehensive annual report documents the organization's security trajectory, key milestones achieved, and strategic recommendations for the year ahead.

Bridgham uses artificial intelligence in several areas of service delivery. The following describes where AI is used and the role it plays.

AI Security Advisor

The platform includes an AI-assisted security advisory tool that analyzes client security data to generate recommendations and respond to security questions. This tool retrieves real-time client data, including protection scores, service configurations, compliance evaluations, incident history, and uploaded policy documents, to provide context-specific guidance. Responses are generated by a large language model and are grounded in the client's actual security data. The advisor does not have access to data belonging to other clients.

Automated Threat Intelligence

Automated threat intelligence systems aggregate data from multiple third-party security data providers to assess risk levels, detect anomalies, and generate alerts. These systems analyze IP addresses, domains, email addresses, and other indicators of compromise against known threat databases.

Security Scoring and Recommendations

AI-assisted analysis is used to calculate protection scores, prioritize security recommendations, and identify areas where a client's posture can be improved. Scoring algorithms consider factors including service configuration status, compliance evaluation results, incident history, and industry benchmarks.

Document Analysis

When clients upload security policies, risk assessments, or other documents, AI-assisted tools may be used to extract key information, identify gaps against compliance frameworks, and generate summaries. Uploaded documents are stored securely and are accessible only to the uploading client and authorized Bridgham personnel.

Client data is used solely to deliver contracted services and is not used to train general AI models or shared with third parties except as required to deliver contracted services.

When client data is transmitted to AI systems for processing, it is used only for the purpose of generating the immediate response or analysis. Client data is not retained by AI service providers beyond what is necessary to complete the request.

Bridgham maintains appropriate technical and organizational safeguards to protect client data during storage, transmission, and processing. Access to client data is restricted to authorized personnel and automated systems required to deliver services. For further detail on data handling practices, refer to our Privacy Policy.

AI-generated recommendations are informational and do not constitute legal, regulatory, or professional security advice. All recommendations should be reviewed by a qualified professional before implementation.

While Bridgham strives for accuracy in all AI-assisted outputs, automated systems may produce results that are incomplete, outdated, or not fully applicable to a specific client's circumstances. Threat detection systems may fail to identify novel or zero-day threats not yet cataloged in available threat intelligence databases.

Bridgham does not guarantee that its services will prevent all security incidents, achieve specific compliance outcomes, or eliminate all organizational risk. Clients are responsible for evaluating recommendations and making implementation decisions appropriate to their own environments.

For complete terms governing the use of Bridgham services, refer to our Terms of Service.

For questions regarding this disclosure, contact support@bridghamcyber.com.