Home Trust Center
Trust Center
Trust Center
How we protect your data, govern AI and work inside your controls.
Our commitments
Your data stays yours.
We use client data only to deliver the agreed services.
Your environment first.
Wherever possible, we work inside your systems and tenancy rather than moving data to ours.
No training on your data
without your written permission.
Transparency.
We tell you which tools, subprocessors and people are involved in your engagement.
How we protect information
Access control
Least-privilege access, granted per engagement and removed at the end.
Authentication
Multi-factor authentication on all company systems.
Devices
Company-managed devices with disk encryption, screen lock and endpoint protection.
Encryption
Data encrypted in transit and at rest in the systems we control.
Confidentiality
All staff and contractors sign confidentiality agreements.
Incident response
A documented process for security incidents, including timely client notification.
Subprocessors
A maintained list of subprocessors, available on request.
How we govern AI in our own work
Evaluation before release
AI we build is tested against evaluation sets and quality thresholds before it reaches production.
Human oversight
People review AI output where it affects customers, finances, compliance or safety.
Logging
AI-assisted actions and decisions are logged for review.
Proportionate controls
Controls match the risk of each use case.
Model and vendor due diligence
We assess AI vendors’ data handling and terms before use.
Our AI use statement
We use AI tools to support research, analysis, drafting, coding and quality checks in our delivery and in our own operations. Where client data is involved, we use only tools approved for that engagement, configured so that client data is not retained or used for training where such options exist. Outputs are reviewed by qualified people. Some content on this website is prepared with AI assistance and reviewed by our team.
Data protection
We handle personal data in line with the EU General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023, as applicable. We sign data processing agreements with clients, support data-residency requirements where feasible, and retain client data only as long as the engagement and legal obligations require.
Certifications and frameworks
Request our security pack
Our security pack includes our information-security summary, subprocessor list, standard data processing agreement and completed questionnaire responses. We’re happy to complete your vendor assessment.