Least-privilege access
Only the consultants assigned to your project can access your requirements and files. Access is removed when the engagement closes.
Project files
Uploads are stored in a private bucket and served through short-lived signed links. Files are never publicly listable.
Retention
Project data is retained for the support window and statutory record-keeping period, after which it is deleted or anonymised on request.
Sub-processors
We use reputable cloud hosting, database and payment providers. Each is bound by its own data protection commitments.
Last updated 25 August 2026. Questions about this policy can be raised through the contact page.