AboutHow We Work
The PrinciplesBehind EveryCorum Digital Brand.
Our purpose is to inspire more effective business communication. This page is how we deliver on it: the principles our team holds itself to, how we work with you from the first conversation onward, and how the company is governed.
01 / Our principles
What westand for.
Our Principles
- 01
We build it ourselves.
Our software platforms are designed, developed and supported by our own team. When something needs to change, we change it, without waiting on a third party's roadmap.
- 02
Security is an engineering requirement.
Security isn't a feature we add at the end. It's part of how every change is written, reviewed and released, and we have it checked by an independent SOC 2 Type II audit and an annual third-party penetration test.
- 03
The people who build it stand behind it.
Our support, customer success and engineering teams work as one. Hard questions reach the people who build the platform, and what customers tell us shapes what we build next.
See how we work with you - 04
Partners are partners.
firmChannel is sold only through integrators, resellers and service providers, and we never contact a partner's clients directly. humanKIOSK has its own partner program too.
- 05
As much or as little as you need.
Our software runs on the media players and displays our customers choose, and our hardware runs the software they choose. Use us for software alone, or for everything from supply and installation to content.
- 06
Accountable leadership.
A Board of Directors oversees the company, our leadership team reviews technology and security every week, and every policy has an owner and an annual review.
See how we lead - 07
We give back.
We've supported the communities around our offices, from food banks to children's cancer research.
See our community work
From the first conversation to years of daily use, here is what to expect.
02 / Working with you
How We WorkWith You.
From the first conversation to years of daily use, here is what to expect.
Built for the long termFrom the first conversation to years of daily use.
01Start with the right team.
Each brand has its own specialists, and our pre-sales team answers technical and security questions before you commit. Our Customer Success team handles security enquiries and audit support: we'll complete your vendor security questionnaire and send our SOC 2 Type II report under NDA.
02Commitments in writing.
The security commitments on both sides, ours and yours, are written into our SaaS terms, which every customer accepts before using the platform and which stay available in your account at all times.
03Orders checked before they ship.
Every hardware order is checked against your documents before it's processed: product, quantity, pricing, shipping address and special instructions. Anything that doesn't match is resolved first. Fabrication drawings are verified before production, and you receive tracking details when your order ships.
04Onboarding and training.
Our Customer Success team works with you through onboarding, and MediaTile subscriptions include unlimited web training and telephone support. Every platform update is announced in the portal's What's New panel, and major features come with video walkthroughs.
05Support from people who know the platform.
Reach our support team by phone or email, and escalate a request whenever you need to. Behind the support team are the engineers who build the platform. (If you bought through a reseller, your reseller is your first point of contact, with our team behind them.)
06Your feedback shapes the product.
Every support request is tagged as an issue, a feature request or a training need. Our leadership reviews them every week, prioritizes by how many customers are affected, and tells customers what happens next. Requests feed a product roadmap we review every quarter, and finished work appears in the release notes.
07Changes made carefully.
Every code change is reviewed by someone other than its author, and the system enforces it: no one can approve their own change. Automated tests must pass before code can merge, releases are tested in separate QA and staging environments, and the Chief Technology Officer approves every production release. Every change is assessed for security impact and comes with a plan to roll it back.
08Ready if something goes wrong.
We follow a defined incident response process, from detection and containment to recovery and lessons learned, and we rehearse it every year. If our platform can't be reached, your players keep showing their cached content, so your screens don't go dark.
03 / Governance
How WeLead.
- 01
Board oversight.
A Board of Directors oversees Corum Digital's governance, strategy, risk and management accountability, including the results of our SOC 2 audit and the effectiveness of our security program. The Board holds a full risk and technology review every January, and critical issues are escalated to it immediately.
- 02
Weekly technology leadership.
Our IT Leadership Committee of senior leaders meets every week to oversee technology strategy, operations and security, and to make sure our SOC 2 controls stay in place.
- 03
Clear ownership.
Our Chief Technology Officer also serves as Chief Information Security Officer and runs the security program. Our Chief Executive Officer approves every security policy and makes the final call on any risk the company accepts. Privacy has its own named owner.
- 04
Policies that stay current.
Every policy is reviewed every year, kept under version control and shared with the whole team. An exception needs a written justification, a risk assessment and executive approval. Each year we also run a company-wide risk assessment, reported to the Board, and a separate fraud risk review.
- 05
People you can trust.
Everyone at Corum Digital is background-checked and signs a confidentiality agreement before starting, and completes security awareness training in their first week. Contractors with access to our systems are checked and trained the same way. Access follows least privilege and is protected by multi-factor authentication, and it's removed the day someone leaves. Our developers take secure-coding training every year. Our Code of Conduct applies to everyone, from new hires to directors; it's acknowledged every year, and anyone who raises a concern in good faith is protected from retaliation.
- 06
Suppliers held to our standard.
We classify every supplier by how critical it is and whether it touches customer data. A supplier that will hold customer data needs executive approval, critical suppliers' compliance reports are reviewed every year, contracts require them to tell us about security incidents, and when a supplier leaves, our data is returned or destroyed.
Our approach to security
“Security isn't something we bolt on at the end. It's an engineering requirement for every release, and independent auditors and penetration testers check our work, not just us.”