
Client information should be accessed only by authorised people for approved business purposes.
We aim to apply role-based access so team members receive only the information and system permissions needed for their assigned tasks. Access is defined with the client and should be reviewed when responsibilities change.
We do not promise that no employee will ever see personal or sensitive information. Some authorised work may require access to client records. Our commitment is to restrict access, train assigned personnel and handle information according to agreed procedures and applicable requirements.
Specific security controls, retention periods, certifications and contractual obligations should be confirmed before engagement.
We work with clients to define who can access what, why access is needed and how work is reviewed.