Confidentiality
How we handle your information
What happens to your documents and your program details from the first reply onward. These six commitments apply to every engagement.
Before we see anything technical, we sign.
A mutual non-disclosure agreement is the first document in every relationship. We send ours on the first reply; we will sign yours if you prefer. No technical detail is exchanged, and no document is opened, until it is in place.
Your documents live in a space that is yours.
Each client gets a dedicated, access-controlled workspace in our Microsoft 365 environment. Only the people working on your engagement can reach it. Links expire. Nothing is shared onward without your written permission.
We don't put your documents into tools you haven't approved.
Client material is not uploaded to third-party AI or analysis services, and it is not used to train anything. If a tool would help your engagement, we say which one and ask first.
Conflicts are disclosed, not managed quietly.
We will not take on a directly competing device in the same indication while yours is active without telling you. If a conflict emerges mid-engagement, you hear about it the day we do.
Retention is defined.
At the end of an engagement, working files are returned or deleted at your instruction, and we keep only what the regulation or our professional liability insurer requires us to keep, for as long as they require it.
One person is accountable.
Every engagement has a named principal who is responsible for the confidentiality of your information, and who you can reach directly.
Tell us where your program is.
We reply within 12 hours. You get a written scope and estimate before any work starts.