Know what you’re buying.
Know what is still pending.

Confirmed facts and open decisions.

• Brand and lead: Access Red Team; founder Cole Lyons.
• Contracting party: pending. A legal entity, DBA or decision to contract personally has not been confirmed.
• Insurance: pending. No professional liability, technology E&O or cyber coverage has been verified. Coverage claims are not published.
• Customer assessment evidence: pending. Storage, access controls, retention, deletion and backup arrangements have not been selected or confirmed.
• Execution evidence: a reproducible synthetic local lab, explicitly separate from customer work.

These gaps can be discussed during scoping. Resolve the contracting party, any buyer-required insurance, evidence controls and signed authorization before testing or accepting customer evidence.

Website inquiries are a separate data flow.

The deployed website uses Cloudflare Workers, D1, Turnstile and Cloudflare email services. Minimal inquiry alerts reach the founder’s existing Gmail inbox. These selections cover website inquiries; they do not approve those services for customer assessment evidence.

No external AI provider has been confirmed as an approved processor for customer evidence. Synthetic records do not eliminate the possibility of PHI in surrounding logs, screenshots or production records.

The draft handling worksheet calls for a named repository and administrators, access and encryption checks, approved processors, capture boundaries, retention and deletion decisions, and incident contacts. These are proposed controls, not operating-control claims.

Contact Cole 24/7. Agree the response commitment.

Sales inquiries and existing-customer concerns can be submitted at any time. A receipt confirms submission, not a human acknowledgment or the start of technical work. No guaranteed response time or staffed backup arrangement is currently published.

Each engagement must name urgent and routine channels, acknowledgment targets, technical-response scope and a fallback if Cole is occupied or unreachable. Until a qualified alternate is named and authorized, the fallback is the customer’s responsible operational or security team, with assessment activity paused where needed.

Phone and live chat are not currently configured. Use the business inquiry route for scoping; existing customers use their agreed escalation route for urgent concerns.

A factual summary for your vendor review.

Download the buyer review summary ↗

The summary describes the proposed service, the lab’s limited scope, confirmed facts and unresolved vendor requirements. It does not include internal engagement or control worksheets.

Fee, dates, legal party, insurance, evidence controls and response targets remain unset. Detailed planning worksheets are kept internally and can support an agreed scoping process; they are not executed agreements.