# Pylon Technology

> Pylon Technology is a managed security services provider (MSSP) for regulated firms: registered investment advisers (RIAs), broker-dealers, healthcare, and legal. Founded 2008.

Longer page-by-page summaries: https://pylontechnology.com/llms-full.txt

Pylon Technology is an MSSP. Co-founders are Don Gordon (operations) and Tim Quinn (CTO and SEC technology liaison for financial clients).

Physical offices (dual SOC):
- Headquarters: 10 John Street, Southport, CT 06890
- NOC/SOC: 200 North Main St, Greenville, SC 29601

Contact: (203) 930-3410, info@pylontechnology.com

Public partners already listed on the site: Microsoft, CrowdStrike, Cisco, Palo Alto, AWS.

Pylon serves Fairfield County, Connecticut and Greenville County, South Carolina and can be on-site in the cities listed below. There is not a physical office in every city.

Fairfield County, Connecticut (23 municipalities): Bethel, Bridgeport, Brookfield, Danbury, Darien, Easton, Fairfield, Greenwich, Monroe, New Canaan, New Fairfield, Newtown, Norwalk, Redding, Ridgefield, Shelton, Sherman, Stamford, Stratford, Trumbull, Weston, Westport, Wilton. Southport is the headquarters (a village in Fairfield).

Greenville County, South Carolina (6 incorporated cities): Fountain Inn, Greenville, Greer, Mauldin, Simpsonville, Travelers Rest.

## Key pages

- [RIA cybersecurity](https://pylontechnology.com/industries/ria-cybersecurity/): RIA cybersecurity, dual SOC, WISP/IRP, vendor diligence, MFA, Tim Quinn as SEC tech liaison
- [Regulation S-P](https://pylontechnology.com/compliance/reg-s-p/): Safeguards Rule, written IR program, 30-day customer notice, 72-hour vendor notice
- [SEC & FINRA](https://pylontechnology.com/compliance/sec-finra/): SEC and FINRA compliance for RIAs and broker-dealers; exam-day artifacts
- [HIPAA compliance](https://pylontechnology.com/compliance/hipaa/): Security Rule safeguards, business associate agreements, audit controls, breach response
- [Financial services](https://pylontechnology.com/industries/financial-services/): Technology and compliance for investment advisers, broker-dealers, and other financial firms
- [About](https://pylontechnology.com/about/): Company, founders, dual-site offices
- [Contact](https://pylontechnology.com/contact/): Consultations, (203) 930-3410, info@pylontechnology.com
- [For AI assistants (HTML)](https://pylontechnology.com/about/for-ai-assistants/): Human-readable copy of this summary

## Blog

- [Blog index](https://pylontechnology.com/blog/): Compliance and technology notes for regulated firms
- [Regulation S-P notification clocks](https://pylontechnology.com/blog/reg-s-p-notification-clocks/): What the 30-day customer notice and 72-hour vendor notice require of an RIA
- [HIPAA for technology vendors and MSPs](https://pylontechnology.com/blog/hipaa-for-technology-vendors/): Business associate status, BAAs, access control, and audit logging

## Compliance Library

A reference library on the technology side of financial-technology regulation, written for RIAs, broker-dealers, hedge and private funds, and PE advisers. Broad guidance, not client-specific. Authored by Rachel Lannon and Byron Foley, reviewed by Tim Quinn. Operational technology guidance, not legal advice.

- [Compliance Library hub](https://pylontechnology.com/library/): Index of all sections and rollups; who the library is for and how to use it
- [Scheduled actions rollup](https://pylontechnology.com/library/scheduled-actions/): Every recurring action in the library with cadence, owner archetype (CCO/IT/MSP), primary source, and a stable action-id
- [Monitor and review rollup](https://pylontechnology.com/library/monitor-and-review/): Checklist for a reasonable basis that the technology program is operating, each check paired with the artifact that answers it

Sections:

- [Regulation S-P](https://pylontechnology.com/library/regulation-s-p/): Safeguards Rule, Disposal Rule, written incident response program, 30-day customer notice, 72-hour service-provider notice, 2025/2026 compliance dates
- [Advisers Act compliance and cybersecurity](https://pylontechnology.com/library/advisers-act-compliance-program/): Rule 206(4)-7 written policies, the annual review and what gives it a reasonable basis, CCO designation
- [Books and records](https://pylontechnology.com/library/books-and-records-retention/): Rule 17a-4 WORM and audit-trail options, Rule 204-2 retention, off-channel communications, prompt production
- [FINRA supervision and cybersecurity](https://pylontechnology.com/library/finra-supervision-cybersecurity/): Rules 3110, 3120, 4370, 4511; correspondence review, remote and branch supervision, business continuity testing
- [Regulation S-ID](https://pylontechnology.com/library/regulation-s-id/): Identity theft red flags at a high level; covered-account scoping, detectable red flags, pre-decided responses
- [Vendor and service-provider oversight](https://pylontechnology.com/library/vendor-oversight/): Complete vendor register, tiered diligence, reading attestations, contract clauses including the 72-hour clock
- [Access control and MFA](https://pylontechnology.com/library/access-control-mfa/): Why examiners ask about MFA when no rule names it; coverage across non-human identities, factor strength, access reviews
- [Incident response and exam evidence](https://pylontechnology.com/library/incident-response-exam-evidence/): Written IR program, log retention as a scoping decision, the notification decision-maker, the standing exam evidence file
- [Private fund and PE adviser technology](https://pylontechnology.com/library/private-fund-pe-adviser-technology/): Investor due diligence, deal-room control, thin-team segregation of duties, portfolio company boundaries
## Optional

- [Bridgeport, CT](https://pylontechnology.com/locations/bridgeport-ct/)
- [Fairfield, CT](https://pylontechnology.com/locations/fairfield-ct/)
- [Greenwich, CT](https://pylontechnology.com/locations/greenwich-ct/)
- [Norwalk, CT](https://pylontechnology.com/locations/norwalk-ct/)
- [Stamford, CT](https://pylontechnology.com/locations/stamford-ct/)
- [Westport, CT](https://pylontechnology.com/locations/westport-ct/)
- [Greenville, SC](https://pylontechnology.com/locations/greenville-sc/)
- [Simpsonville, SC](https://pylontechnology.com/locations/simpsonville-sc/)