Trust & Information Handling

WEBSITE INFORMATION · 22 OCTOBER 2026

Before materials are shared

We agree the engagement scope, relevant sources, confidentiality, permitted tooling and information-handling arrangements before receiving confidential client materials. Initial enquiries should stay at a high level.

Source and data access

Access is selected for the work: documents, interviews, repository access or operating evidence as appropriate. Client-controlled access and relevant restrictions are discussed during scoping. Do not place source code or credentials in booking notes or an initial email.

AI and third-party tools

Tool and AI use is agreed for each engagement. Processing client materials through third-party AI services requires written client consent and an engagement-specific data-handling addendum. The approved sources, data flows and tools must match the actual work.

Retention and handoff

Retention, deletion, working-copy arrangements and deliverable handoff are specified in the engagement arrangements. A generic website statement does not replace those terms.

Evidence and reliance

Findings distinguish evidence, interpretation, assumptions and unknowns. The conclusion applies to the agreed system boundary, evidence and decision at the time of review. Specialist testing and certification are included only when explicitly agreed in the scope and supported by appropriate expertise.

Independence and prior involvement

We make clear who engages us and disclose prior design or governance involvement. Continuity assurance and a separately independent third-party opinion are different arrangements. Appropriate reviewer separation or specialist participation is agreed where needed.

Discuss procurement requirements

Contact [email protected] with the information or contractual requirements relevant to a proposed engagement. Available safeguards and documentation are established against the actual scope.