How we handle your data.

Confidentiality

We are glad to sign a mutual non-disclosure agreement before any data is shared.

Only what’s needed

We ask for the minimum data a task requires. Many engagements can start from a sample or a de-identified extract.

Your environment

Where data should not leave your infrastructure, we can discuss working inside your cloud account or systems.

Personal data

Where practical, personal information can be redacted or pseudonymised early in the process, before deeper analysis.

AI models

We aim to use AI services under business terms that, according to those providers, do not use submitted data to train their models. The services used for an engagement can be agreed with you, and self-hosted models considered where required.

Access

Access to your data is limited to the people working on your engagement.

Retention

At the end of an engagement we delete working copies of your data, unless longer retention is agreed in writing or required by law, and can confirm deletion in writing.

Have specific requirements, such as a data processing agreement, a security questionnaire or a particular region? Ask us before you share anything.

This page describes our general practices. It is not a contract. The terms for any engagement are those agreed in writing for that engagement (for example a proposal, statement of work or contract), which govern if they differ from this page.