Data Handling Statement

How Baselinx PLM protects, processes, and manages your sensitive data

Our Commitment to Data Protection

Baselinx PLM is committed to protecting the confidentiality, integrity, and availability of all data entrusted to our platform. We implement comprehensive security controls aligned with federal standards including NIST SP 800-171, DFARS 252.204-7012, and industry best practices for protecting Controlled Unclassified Information (CUI).

Encryption Standards

  • AES-256 for data at rest
  • TLS 1.3 for data in transit
  • RSA-2048 for key exchange
  • FIPS 140-2 validated cryptographic modules

Access Controls

  • Role-based access control (RBAC)
  • Multi-factor authentication (MFA)
  • Principle of least privilege
  • Regular access reviews and certification

Infrastructure Security

  • FedRAMP-authorized cloud infrastructure
  • SOC 2 Type II certified data centers
  • US-based data residency
  • Continuous security monitoring

Compliance

  • NIST SP 800-171 compliant
  • DFARS 252.204-7012 compliant
  • ITAR/EAR compliant
  • CMMC Level 2 ready

Data Categories & Handling Procedures

Controlled Unclassified Information (CUI)

Information that requires safeguarding or dissemination controls pursuant to federal law, regulation, or policy.

Handling Procedures

  • Encrypted at rest using AES-256 encryption
  • Encrypted in transit using TLS 1.3
  • Access restricted to authorized personnel only
  • Audit logging for all access and modifications
  • Marked with appropriate CUI designations

Retention Period

7 years after contract completion or as specified by contract requirements

Technical Data

Recorded information of a scientific or technical nature, including research and engineering data, engineering drawings, and specifications.

Handling Procedures

  • DFARS 252.227-7013 data rights markings applied
  • Export control review before any external sharing
  • Version control and change tracking
  • Restricted distribution per contract requirements
  • ITAR/EAR compliance verification

Retention Period

Per contract requirements, minimum 6 years

Configuration Management Data

Data related to configuration identification, control, status accounting, and audits.

Handling Procedures

  • Baseline protection and version control
  • Change control board approval for modifications
  • Complete audit trail maintenance
  • Cross-reference integrity verification
  • Periodic backup and recovery testing

Retention Period

Life of program plus 3 years

User Account Information

Personal information related to user authentication and authorization.

Handling Procedures

  • Passwords stored using bcrypt hashing
  • No storage of full credit card numbers
  • Access logs maintained separately
  • MFA credentials encrypted
  • Regular access reviews

Retention Period

3 years after account deactivation

Your Data Rights

Access

Request a copy of your data

Correction

Request correction of inaccurate data

Deletion

Request deletion of your data (subject to retention requirements)

Portability

Request data export in standard formats

Data Breach Notification

In the event of a security incident involving your data, Baselinx PLM will:

  • Notify affected customers within 72 hours of discovery
  • Report to CISA and relevant agencies as required
  • Provide details on the nature and scope of the incident
  • Implement remediation measures to prevent recurrence

Data Protection Inquiries

For questions about our data handling practices, to exercise your data rights, or to report a security concern, please contact our Data Protection team.

Data Handling Statement Version 2.0 | Effective Date: February 2026 | Last Reviewed: February 2026

PROPRIETARY AND CONFIDENTIAL

This website, including all content, features, functionality, design, graphics, and underlying software (collectively, the "Platform"), is the exclusive proprietary property of Baselinx PLM and is protected by United States and international copyright, trademark, patent, trade secret, and other intellectual property or proprietary rights laws.

Unauthorized reproduction prohibited
Distribution strictly forbidden
All rights reserved worldwide

NOTICE: This Platform may not be copied, reproduced, distributed, transmitted, displayed, published, adapted, modified, sold, licensed, or otherwise exploited for any purpose whatsoever without the prior written consent of Baselinx PLM. Any unauthorized use, reproduction, or distribution of this Platform or any portion thereof may result in severe civil and criminal penalties, and will be prosecuted to the maximum extent possible under the law.

The information contained in this Platform is provided for demonstration purposes only. All data, names, and scenarios are fictional and do not represent actual programs, contracts, or governmental operations. Any resemblance to actual events or persons is purely coincidental.

By accessing or using this Platform, you agree to be bound by these terms. If you do not agree to these terms, you are not authorized to access or use this Platform.

2026 Baselinx PLM. All Rights Reserved. Patent Pending. ITAR/EAR Compliant.
D-U-N-S®: 14-392-8991|UEI: GEAVTX6X2685|CAGE: 1A2G6