Skip to content

Data handling

How we handle your data.

Draft for review. Confirm the bracketed items and review with counsel before publishing.

To find where your time is going, we have to look at real data from your business. Here is exactly how we treat it. For general website privacy, see our privacy policy.

The short version: we only look at what the work requires, we never sell it or use it for another client, and the findings and systems we build are yours.

What we look at

During an audit we review the operational data you choose to share: email and ticket exports, calendar and time logs, tool reports, transcripts. You decide what to send. During the audit we read your data. We do not change anything inside your systems.

We take only what the work needs

The narrowest set of data that lets us do a good job, for the time we need it. If a summary works instead of raw records, we prefer the summary.

The tools we use

We use business-tier AI services configured so your data is not used to train public models. Our current providers are listed here: [subprocessor list placeholder]. A person, not a model, is responsible for every conclusion we hand you.

What we never do

  • Never sell your data or share it for advertising
  • Never use one client's data to benefit another
  • Never share it outside the people delivering your engagement, unless the law requires it
  • Never keep access to your systems after an engagement ends

Confidentiality

Every engagement runs under a written agreement with confidentiality. Want a separate NDA in place first? Just ask, and we will sign one before you send anything.

Keeping and deleting it

We keep engagement data while we work together and for a limited period afterward: [retention period placeholder]. You can ask us to return or delete it at any point, except where the law requires us to keep something.

You own your data and your results

Your data stays yours. The findings, the plan, and the systems we build are yours to keep, even if you decide not to move forward after an audit.

Regulated data

Our standard process is built for data that is not subject to special regulation such as HIPAA. If your data carries specific requirements, tell us before you share anything.

Working draft, not legal advice. Have an attorney review it against your actual tools and contracts before you rely on it.