Access and secrets
- Agree the minimum access needed for the work.
- Use named accounts and multi-factor authentication where the client system supports them.
- Agree how secrets are stored and when project access is removed.
Security and responsible AI
How we handle access, data and AI systems.
We agree project controls for the systems, data and risks involved before production access begins.
Software delivery
- Define code-review and release checks for the project.
- Choose dependency, type and automated tests appropriate to the stack.
- Agree how test and production settings are separated and decisions recorded.
Client data
- Agree what data can be accessed, where it is processed and how long it is kept.
- Use representative or synthetic test data when real records are unnecessary.
- Record relevant providers, data locations and deletion requirements for the project.
AI systems
- Assess model providers against the use case and data constraints.
- Define how source information, model output and human decisions remain distinct.
- Agree evaluation and human-review controls before a high-impact external action.
For procurement teams
Support for your security review.
We can complete a relevant supplier questionnaire and discuss contractual terms, subprocessors, access, incident handling and handover.
Regulated, safety-critical or high-risk processing may require specialist legal, compliance or security review.
Discuss your security requirementsStart a conversation
Discuss your security requirements.
Tell us about the data, systems and controls involved.