It's reasonable to ask exactly what happens to it. Here's what we do — and what we don't claim.
Named individuals only, permissioned per client. Access removed the day someone leaves the account. Access log maintained.
Locked-down desktops in a controlled office. No local file storage, no USB or removable media, no printing without authorisation. [[TOKEN:device_policy]]
Files move through your portal or an encrypted channel you nominate. Not personal email, not consumer file-sharing.
A company-level agreement with you, plus an individual NDA signed by every person who touches the account.
UK client data handled under GDPR terms, with a data processing agreement available. [[TOKEN:gdpr_dpa_status]] Certification: [[TOKEN:iso_cert]]
Backup staff on every account. [[TOKEN:bcp_details]]
We'd rather answer a security question up front than after you've handed over access.