Start a project
Menu
ServicesAll servicesCybersecurityCloud EngineeringApplication ServicesEnterprise PlatformsData & AnalyticsAI & Machine LearningInternet of ThingsMobilize Talent
PlatformsAll platformsIdentity and accessPrivileged access and secretsERP, HCM and financeCRM, ITSM and automationHealthcareInsurance and bankingData and integrationCloud and AIIndustrial, utilities and mainframeSkills matrix
Case studiesAll case studiesIdentity and accessPrivileged accessSecurity operationsCloud and infrastructureApplicationsERP and HCMCRM, ITSM and automationIndustry platformsData and analyticsAI and agents
IndustriesAll industriesEnergy, oil & gasHealthcare payersBanking & financial servicesInsurancePublic sectorManufacturingLocations
InsightsField notesLearning tracks
CompanyAbout CohashPortfolioSkills matrixCareersTrust and securityContact
Start a project
locations · burlington

A modernizing chip fab, an electric aircraft plant at the airport and a privacy law arriving in 2028.

Two of Chittenden County's employers sit inside federal industrial policy. GlobalFoundries' Fab 9 is part of a CHIPS Act funding agreement, and BETA Technologies builds electric aircraft beside the airport under export control rules. Vermont's new privacy law follows on 1 January 2028.

Talk to an engineer
work in burlington, vermont7 services
3 local rules covered below
in short·15-second read

Around Burlington we work with semiconductor and advanced manufacturers, aerospace companies, captive insurers and the hospitals and university that anchor the local job base.

Projects cover privileged and remote access into fab and plant networks, access control for export-controlled technical data, and data inventories ahead of Vermont's new privacy act. Cohash is based in Frisco, Texas, serves Vermont remotely and travels in for workshops and launches.

Cohash doesn't have a Vermont office. We serve Burlington-area organizations remotely from Frisco, Texas, and fly into Burlington for discovery workshops, plant walk-throughs and launch support.

Ask an engineer facts checked 2026-10-21 · 9 sources
rules
Vermont breach notice, 9 V.S.A. §2435Vermont Data Privacy and Online Surveillance ActVermont data broker registration, 9 V.S.A. §2446
background
Every entitlement translated into business terms Auto-certified by policy unchanged and peer-aligned Ranked exceptions SoD conflicts first Revoke and verify proof logged with the decision
field note · 5 minThe access review nobody dreads
burlington, vermont by the numbers

What's specific about Burlington, Vermont

Each figure comes from a public source, linked on the card.

01

Of the Burlington-South Burlington metro's 125.2 thousand nonfarm jobs in September 2026 (preliminary), 23.7 thousand were in education and health services, 23.3 thousand in government and 12.2 thousand in manufacturing, BLS reports.

source ↗ 02 $1.5 billion

GlobalFoundries' 2025 Form 10-K says its November 2024 CHIPS Act agreement with the Commerce Department, worth up to $1.5 billion for projects in Malta, New York and Burlington, includes modernizing its Fab 9 facility in Burlington.

source ↗ 03 188,000

BETA Technologies, headquartered at 1150 Airport Drive in South Burlington, describes an approximately 188,000 square foot Final Assembly Facility there designed to produce more than 300 aircraft a year at maturity, in its 2025 Form 10-K.

source ↗ 04

Vermont's Department of Financial Regulation describes the state as the leading global domicile for captive insurers and publishes license count summaries through 30 September 2026.

source ↗ 05

Governor Phil Scott signed S.71, Vermont's consumer data privacy and online surveillance act, on 16 June 2026 as Act 145, according to the Legislature's bill status page.

source ↗
who and what

Who we work with in Burlington, Vermont, and the rules they work under

industries

  1. Semiconductor manufacturing

    A fab runs tool controllers, manufacturing execution systems and equipment vendor support links that predate modern identity. Tool vendors often need remote access to diagnose a down tool at any hour. We broker that access through a PAM gateway with approvals and recording, keep OT service accounts out of the corporate directory and segment engineering data by program and customer.

  2. Electric aircraft and aerospace

    Aircraft makers hold export-controlled design data and must limit release of controlled technology to foreign persons, including some employees and suppliers. Defense work adds facility and personnel clearance requirements. We tie data access to nationality and authorization attributes, separate defense program enclaves and log every access to controlled drawings.

  3. Captive insurance and financial services

    Many captives are run by management firms serving several parent companies, with the parent company's risk and claims data in shared systems. Each captive's records have to stay apart. We design per-client access boundaries, govern data shared with actuaries and auditors, and tighten privileged access on the policy and accounting platforms.

regulations

  1. Vermont breach notice, 9 V.S.A. §2435 ↗

    Consumers must be notified within 45 days of discovery, and the Attorney General must get a preliminary notice within 14 business days. More than 1,000 consumers notified at one time also triggers notice to the consumer reporting agencies.

  2. Vermont Data Privacy and Online Surveillance Act (Act 145, S.71) ↗

    Signed 16 June 2026 and effective 1 January 2028. It reaches businesses handling personal data of 35,000 Vermont consumers, or sensitive data of 3,000, with consumer health data rules that have no threshold. The Attorney General enforces it, with a 60-day cure period through 30 June 2029.

  3. Vermont data broker registration, 9 V.S.A. §2446 ↗

    Data brokers register every year and disclose any breaches from the prior year. A revised version effective 1 January 2027 raises the fee to $900, adds a $20,000 bond, moves the deadline to 1 July and requires disclosure of sales to generative AI developers.

services

Most requested in Burlington, Vermont

The services clients in Burlington, Vermont ask us for most.

you are hereBurlington, Vermont
01Vermont's privacy act doesn't start until 2028. What should we do now?

Build the data inventory while there is time. Map what personal and sensitive data you collect, where it goes and which vendors buy or receive it. Consumer requests, sensitive data handling and the 35,000-consumer threshold test all depend on knowing those flows.

02Does the new act cover consumer health data even for small companies?

Law firm summaries of Act 145 say the consumer health data provisions apply to any entity doing business in Vermont or targeting Vermonters, with no volume threshold. Clinics and wellness apps should confirm with counsel how the HIPAA carve-outs apply to them.

03Can tool vendors keep remote access to our fab equipment?

Yes, on your terms. Vendors request a session, an engineer approves it for a specific tool and time window, and the session is recorded. Standing VPN accounts and shared vendor passwords go away.

04How do you handle export-controlled data when some employees are foreign nationals?

With attribute-based access. HR or export compliance records each person's authorization status, and the identity system enforces it on file shares, PLM and engineering tools. Export counsel decides who is authorized; we make sure the systems follow that decision.

elsewhere

Other cities we cover

All 82 cities
AtlantaPayments & payers ChicagoTrading & healthcare New YorkNYDFS-regulated finance AustinTech & state government Dallas–FriscoBanking, fintech, telecom (HQ) HoustonEnergy & pipelines
sources 9 sources linked last checked 2026-10-21 content fingerprint 9005519d
  1. 01BLS, Burlington-South Burlington economy at a glancebls.gov ↗
  2. 02GlobalFoundries, 2025 Form 10-Ksec.gov ↗
  3. 03BETA Technologies, 2025 Form 10-Ksec.gov ↗
  4. 04Vermont DFR, captive datadfr.vermont.gov ↗
  5. 05Vermont DFR, captive insurancedfr.vermont.gov ↗
  6. 06Vermont Legislature, S.71 (2026) bill statuslegislature.vermont.gov ↗
  7. 07Hunton, Vermont comprehensive privacy law summaryhunton.com ↗
  8. 089 V.S.A. §2435legislature.vermont.gov ↗
  9. 099 V.S.A. §2446legislature.vermont.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

Book a working session See the case studies
useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it