Security
How we handle client work.
Six principles for every engagement. This page states practice. It is not an outside audit, and it does not name partner firms.
01
Data stays small
We ask for the material the engagement needs, and we say what it is for.
02
Access stays named
People and systems that can open client material are identified to the client.
03
Decisions that commit stay human
Where a choice affects a customer, a number, or a commitment, a person remains accountable.
04
Vendors stay named
A tool does not sit in the workflow until it has been named to the client.
05
Retention stays agreed
How long we keep material is written into the engagement. We do not keep it past that.
06
Client material stays out of public models
We do not use client material to train public models.
Questions about your systems belong in the assessment, where we can talk about the actual engagement.