Security and confidentiality
Your data is used only for your firm. It goes only where your data agreement says, and only to AI providers that do not train on it under their commercial terms.
Project Oak_Audit trail.xlsxFrom first access to exit, every step on one page
(Sample mandate; days from engagement start)
Project Oak stays in your tenantData room remains the source of truthDay 1- Access granted to 3 foldersAgreed in writing. Revoke at any timeDay 1
- 14 pages sent, names maskedProvider does not train on it. Result returnedDay 2
- Kept apart from every other clientNothing reused outside your firmDay 2
- Run recordedWhen it ran and whether it worked. No document contentDay 2
Approved by a partnerNothing leaves until a person signs offDay 3- Access revoked, files handed overWhat we hold deleted within 90 daysExit
Source: sample audit trail. Names and dates are made up.
Where it lives
Your environment stays yours.
Firm memory sits in your own tenant. Your data room stays the source of truth for shared deal documents. For larger firms, the work itself can run inside your environment. We agree where everything sits before we start.
Access
Only what the work needs.
Before we start, we agree what information the work uses and who can see it. You grant access, it is limited to what the work requires, and you can revoke it at any time.
What leaves
What is sent, and why.
AI cannot work on text it cannot read. For larger firms, the work can run inside the firm's own environment. Otherwise, the text a task needs is sent only to AI providers that do not train on customer data under their commercial terms, and the result comes back. Before anything reaches a model, a redaction and pseudonymisation step can mask names, figures and other identifying details, then restore them in the finished work. Your firm decides what goes where, and the choice is written into your data agreement. Our providers are named in our privacy policy.
Your firm only
Never used for another client.
Nothing from your deals is used for anyone else. We do not train on client data, and we test our checks on public filings rather than client documents. Anything tuned to your firm stays with your firm and is deleted when you leave.
Operational records
Our records hold no document content.
To keep the service running we keep operational records, such as when something ran and whether it worked. These hold no document content, and they have their own clause in your contract.
Human review
A person signs off.
Work is checked, and the checks are shown. Nothing leaves your firm without a person there approving it, unless you decide otherwise.
When you leave
A clean exit, in writing.
We hand over what we hold in standard formats, revoke our access, and delete your data within 90 days unless the law requires us to keep it longer.
Agreed before we start, and set out in your data agreement.
| What | Where it sits | On what terms |
|---|---|---|
| Deal documents | Your tenant and your data room | Your data room stays the source of truth |
| Firm memory | Your own tenant | Stays with your firm, and is deleted when you leave |
| Text a task needs | Your environment, or our AI provider with the result returned | No training under their commercial terms; names and figures masked on request |
| Outputs | Your tools | Yours, along with your data |
| Operational records | With us | No document content, with their own clause in your contract |
GDPR, PIPEDA and Law 25 are laws we work under, not certificates. SOC 2 Type II and ISO 27001 are held by our AI provider and our hosting provider, whose services we run on.
- UK GDPRWe work under it
- EU GDPRWe work under it
- PIPEDAWe work under it
- Quebec Law 25We work under it
Held by our providers, not by us
Our AI provider
Anthropic, whose commercial terms do not allow it to train on your data. It holds SOC 2 Type II and ISO 27001.
Their trust centreOur hosting provider
The services this site and our work run on. It holds SOC 2 Type II and ISO 27001.
Each of these goes into signed paper before work begins, and your data and outputs remain yours.
Signed paper
NDA
If you need one, before you share anything
- 1.Your form, sent over first
- 2.Signed by both sides
Signed paper
Engagement letter
Before work starts
- 1.Scope
- 2.Fees
Signed paper
Data agreement
Before work starts
- 1.Access
- 2.Processing
- 3.Retention
Is our data used to train AI models?
No. We do not train on client data, and we use only AI providers whose commercial terms do not allow them to train on it.
Who processes our data?
Your own environment holds it. For larger firms, the work can run inside the firm's own environment. Otherwise, the text a task needs is sent only to AI providers that do not train on customer data under their commercial terms, and the result comes back. Our privacy policy names every provider, and your data agreement lists what applies to your engagement. Clients in Canada contract with Technologies Verdalyze inc., and clients in the UK and elsewhere with VERDALYZE LTD.
Can you hide client names and figures from the AI?
Yes. Before anything reaches a model, a redaction and pseudonymisation step can mask names, figures and other identifying details, then restore them in the finished work. Your firm decides what goes where, and the choice is written into your data agreement.
Will you sign our NDA?
Yes. Send it over before you share anything.
Can we remove your access?
Yes, at any time. Access is scoped, and you control it.
Do we need to share live deal documents on the first call?
No. Please do not. A description of how your firm works is enough.
Do you hold SOC 2 or ISO 27001?
Not ourselves. Those certificates are held by our AI provider and our hosting provider, whose services we run on. GDPR, PIPEDA and Law 25 are laws we work under, not certificates.
What do you keep?
Operational records, such as when something ran and whether it worked. They hold no document content. When you leave, we hand over what we hold and delete your data within 90 days unless the law requires us to keep it longer.
We have clients with strict requirements. Can you meet them?
It depends on the requirements. We go through your privacy and confidentiality obligations before choosing where anything is hosted or processed, and we will tell you if something cannot be met.