Data confidentiality
Client information is treated as confidential by default. NDAs are welcomed, expected and honoured.
Security & Data Protection
Responsible data handling is central to trust.
Our processes are designed around appropriate confidentiality, access control, secure transfer, quality assurance and data-handling practices — matched to what our controls actually deliver.
Always on
Encryption at rest and in transit — every engagement.
We take confidentiality as a starting position, not an add-on. What's below is what we do consistently — nothing certified we don't hold, nothing claimed we can't evidence.
How we handle client data
Eight practices that shape every engagement.
Confidentiality, access, transit and quality are engineering choices — not marketing lines. Below is what every engagement actually does.
Role-based access controls
Access to client datasets is restricted to the team assigned to the engagement, on a need-to-know basis.
Secure data transfer
Data is transferred over encrypted channels using client-approved mechanisms. No unencrypted transit.
Data handling procedures
Documented processes for how data is stored, accessed, processed and reviewed during an engagement.
Quality assurance & review
Layered quality checks — including human review where accuracy or context matters — before delivery.
Retention & deletion
Data is retained only as long as the engagement requires, then securely deleted per the agreed schedule.
Applicable data protection
We aim to align with the data-protection requirements relevant to your jurisdiction and use case.
Client confidentiality
What we work on, and for whom, stays private unless the client agrees to have it referenced publicly.