Trust & Confidentiality
Access, retention, and disclosure are agreed in writing before anything changes hands.
Access
Least access, in writing
We request the narrowest access that achieves the scope, and the request itself forms part of the agreement.
Retention
A defined lifetime
Client code, hashes, and artefacts carry a retention window agreed before work starts, and are destroyed at the end of it.
Disclosure
Findings stay yours
Findings are delivered to you. Nothing is published, reused as marketing, or shared with a third party without written consent.
Tooling
Our own stack
Assessment runs on tooling we operate. Where a third party service is involved, it is named in the scope.