Remote Access Agreement

1) Authorization

You authorize Nexlink IT LLC to access designated systems solely to deliver the agreed services. Authorization is limited to the accounts, windows, or keys you provide.

2) Access scope

We request only the minimum privileges required. Preferred options are short-lived accounts, time-bound VPN links, or session-based access.

3) Security controls

• Use of secure channels for credentials and files.
• Work on defined maintenance windows when required.
• Separation of production and staging wherever available.
• Configuration changes documented with rollback notes when applicable.

4) Sessions and logging

• Access is time-bound to the engagement and may be revoked after completion.
• We prefer session recording or audit logging when your platform supports it.
• We avoid retaining client data or logs locally beyond what is necessary to complete the work.

5) Client duties

• Provide accurate system details, point of contact, and change windows.
• Maintain backups and recovery options before granting access.
• Rotate or disable credentials promptly after work concludes.
• Notify us immediately of any suspected compromise related to shared access.

6) Revocation

You may revoke access at any time. We may also request revocation of unused or stale credentials to reduce risk.

7) Limitations and incident handling

• Work is performed on a best-effort basis with liability limited to fees paid for the specific engagement.
• In the event of a security incident tied to our access, we will promptly cooperate on containment and remediation steps.
• We are not responsible for pre-existing issues or unrelated third-party failures.

8) Contact