DATA SECURITY & PRIVACY
Respect for data.
Responsibility by design.
Security, confidentiality and privacy requirements should be defined before any client information is accessed or processed.
Our intended operating principles
- Documented confidentiality obligations for personnel.
- Role-based access and least-privilege working practices.
- Client-approved systems and transfer channels.
- Appropriate workforce training and security awareness.
- Defined incident escalation and response procedures.
- Retention and deletion practices aligned to contract and law.