Security
How we protect your data when our specialists work inside your business.
Our commitments
Our specialists work remotely, inside your tools. These are the rules every one of them follows.
Vetted before they start
Every specialist goes through our vetting process and a background check before any work begins.
Trained before access
Every specialist completes our Privacy and Data Protection training, passes an assessment and signs an acknowledgment before getting access to any client system. Training is renewed at least once a year.
Confidentiality in writing
Every specialist signs a Consulting Agreement with confidentiality obligations that continue after the engagement ends.
Secured devices
Devices used for your work must have full disk encryption, an automatic screen lock, a supported operating system kept up to date, and built in antivirus and firewall turned on.
Protected accounts
Our specialists use multi factor authentication wherever your systems offer it, and a unique, strong password for every account.
Your data stays in your systems
Our specialists work inside your tools. Your data does not go to personal accounts, personal storage, personal email or removable drives, and your confidential information is never put into AI tools.
Access only to what the job needs
Our specialists use only the data their work requires. When an engagement ends, their access to our systems and yours is removed promptly.
Health information by agreement only
We do not handle patient records or other health information unless a separate agreement is in place with you first.
Incidents reported quickly
Our specialists report anything suspicious to us right away. We coordinate every next step with you directly.
Your rules come first
If your security or data rules are stricter than ours, our specialists follow yours as well.
Working together: a checklist for your team
A few steps on your side keep your data just as safe.
- Give your specialists access only to the tools and data their work needs.
- Turn on multi factor authentication in your systems where it is available.
- Share any security or data rules of your own, so your specialists can follow them from day one.
- Tell us before an engagement ends, so access can be removed on time.
More about how we handle data
Read our Privacy Policy and our data and security FAQ.