Trust Center
Blevins Holdings Trust Center
Welcome to BlevinsTrust (bTrust) - the central transparency hub for Blevins Holdings, our subsidiaries, and our multi-operational global service portfolio.
Organizational Overview
Blevins Holdings is a diversified enterprise providing mission-critical solutions across high-stakes sectors, including:
- Aerospace & Aviation
- Government & Business Advisory
- Policy Analysis & Development
- Financial Management
- Healthcare Administration
- Public Interest Research
We protect our high-value information assets through a disciplined governance model, formalized control design, and rigorous, routine auditing.
Trust Center Scope
This center serves as the authoritative resource for our security, privacy, and governance posture. Stakeholders can access detailed insights into:
- Control & Containment Frameworks: The standards governing our global security programs.
- Operational Safeguards: Technical and administrative protections deployed across our enterprise.
- Risk Governance: Our methodology for identifying, assessing, and mitigating emerging threats.
- Continuous Monitoring: Real-time visibility and oversight of our control environment.
- Document Requests: Secure pathways to request formal assessments and evidence packages under NDA.
Compliance & Certifications
We maintain strict alignment with international benchmarks to ensure resilience and data integrity.
| Framework | Status |
|---|---|
| SOC 2 Type 2 | Certified & Compliant |
| ISO/IEC 27001 | Certification In Progress |
| NIST 800-53 | Compliant |
| NIST CSF 2.0 | Compliant |
Our governance model is reinforced by structured evidence cycles, periodic internal assessments, and enterprise-level oversight to ensure we remain responsive to a shifting threat landscape.
Our Commitment
Through this repository of verified controls and compliance data, we reaffirm our commitment to transparent, accountable, and high-integrity security. We aim to exceed the rigorous expectations of our financial, public-sector, and defense-adjacent partners.
Illumina
Lucid Motors
Apple
Cushman & Wakefield
CBRE
IQHQ
Maryland Democratic Party
Audi
Mazda Motor Corp.
Disneyland Resort
The Walt Disney Company
San Diego County Regional Airport Authority
Los Rios Colleges
State Of Maryland
Cargill
Glencore
Vitol
United Airlines
Sharp HealthCare
The American Cancer Society
Jefferies Financial Group
Lockheed Martin
U.S. Department of Energy
Kamala Harris
United Parks & Resorts
Vanguard
Wells Fargo
DCCC
Intuit
Gretchen Whitmer
Wes Moore
Gavin Newsom
California State
Marriott Bonvoy
Grossmont-Cuyamaca Community College District
Los Angeles Community College District
Zoom
Booking Holdings
SanDiegoCounty
Airbus
Reports
Reports
Upon verification and execution of suitable confidentiality agreements, Blevins Holdings may provide security-related documentation, including assessment summaries, penetration test overviews, control descriptions, and responses to structured security questionnaires. The scope of shared artifacts is determined by the nature of the engagement and the sensitivity of the information requested.
Self-Assessments
Self-Assessments
We conduct periodic internal security and risk self-assessments to evaluate the design, maturity, and effectiveness of our controls. These evaluations inform remediation efforts, risk treatment priorities, and program improvements. When required by institutional partners, we may provide completed questionnaires or standardized assessments under confidentiality.
Security Grades
Security Grades
We monitor third-party security ratings and external signals related to our public-facing assets as one component of our broader security program. While external security scores provide useful context, they are considered alongside internal telemetry, assessments, and testing. High-level trends or validated results may be shared with partners when appropriate.
Risk Management
Risk Management
Risk management at Blevins Holdings follows a structured process of identifying, assessing, prioritizing, and monitoring risks across security, operational, regulatory, and strategic domains. Risk outcomes guide control design, remediation planning, resource allocation, and governance reporting, ensuring alignment with business objectives and stakeholder expectations.
BC/DR
BC/DR
Blevins Holdings maintains business continuity and disaster recovery capabilities to support essential operations during disruptive events. These capabilities include backup and restoration processes, tested recovery strategies, identification of critical dependencies, and continuous improvement through validation and review.
Training
Training
All employees receive security awareness training covering responsible data handling, threat recognition, incident reporting, and adherence to security policies. Personnel in high-privilege or specialized roles receive additional training relevant to system administration, development, and incident response expectations.
Physical & Environment
Physical & Environment
Facilities and data center providers supporting Blevins Holdings must maintain appropriate physical and environmental controls, including secure access, surveillance, intrusion detection, environmental safeguards, and compliant equipment handling practices. These protections help ensure the physical integrity and resilience of the systems supporting our operations.
- Does the Company require MFA for all privileged users?
- Does the Company provide annual security awareness training to all employees?
- Does the Company maintain vulnerability management processes, including patch timelines?
- Does the Company maintain a current list of third-party subprocessors?
- Does the Company log administrative access to production systems?