Trust & data
Engagement data, handled like evidence.
Each commitment below ships as it is confirmed.
01
Data handling
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Firm and client data isolation by tenant
- Defined retention, export and deletion
- Documented data residency
02
Access & permissions
- Role-based access, associate to partner
- Least-privilege defaults with approval flows
- SSO and MFA support
- Complete, exportable audit logs
03
AI controls
- No firm or client data used for model training without authorization
- Model output logging and version records
- Human approval controls on key steps
- Citation and source traceability for every output
- Published subprocessor list, including model providers
04
Compliance & responsibility
- SOC 2 readiness
- Incident response and notification commitments
- Responsibility allocation defined in contract
- Independence-related data boundaries