04/Confidentiality & Ethics

Held in confidence. Declined when it should be.

This page earns your trust before the work does. It sets out how we handle data, who we work with, and where we draw our lines. We would rather lose an engagement than hold it loosely.

↳/Data handling. Five commitments.

You hand over operational data under NDA. The standard below is the condition on which the work can exist.

01/NDA first

Nothing moves before the terms do.

Nothing operational moves before a mutual NDA is in place. It states what we receive, how we hold it, for how long, and how it ends. We settle the terms while everything is still hypothetical, so neither side negotiates confidentiality after the fact.

Fig. — mutual agreementabstract

02/Minimum necessary

We ask for less, on purpose.

We request only what the model needs. We reduce or abstract identifying detail wherever the rehearsal allows. The model can be faithful even when the file is not, and the fewer specifics we carry, the smaller the surface anyone has to protect.

Fig. — minimum-necessary intakeabstract

03/Isolation

Built for you, and only you.

We build your engagement for you. We do not pool the data, reuse it for other clients, or fold it into a shared product. There is no shared product. Nothing you give us trains or informs anyone else's work.

Fig. — isolationabstract

04/Secure delivery

The report goes only where you send it.

We return findings through a channel you control, encrypted, with access scoped to the people you name. We agree the channel and the recipients before there is anything to deliver.

Fig. — secure deliveryabstract

05/Retention and destruction

Held only as long as agreed.

We retain data only for the agreed life of the engagement, then destroy it to the standard set in the agreement. When the work is done, the data is gone. Destruction is a step we perform.

Fig. — retention lifecycleabstract

↳/Who we work with

Vetted, and mutual.

We work with government protective services, licensed close-protection firms, corporate security leadership and major-event organisers. Access is selective and starts with mutual vetting. You verify us. We verify you.

An engagement proceeds only when both sides are satisfied, and only for a defensive, planning-led purpose. We would rather decline a fit we are unsure of than carry a doubt into the work.

Fig. — mutual vettingabstract

↳/Our refusal lines

Work we decline.

Some lines are easy to draw and some are not. We hold them anyway. A firm that will not draw them has no business doing this work.

Declining is part of the discipline. The judgement that makes a rehearsal worth trusting is the judgement that turns the wrong work away.

—Anything aimed at a person rather than a plan. We model to protect and to prepare.
—Engagements we cannot verify, from parties we cannot establish, or for purposes we cannot stand behind.
—Requests to model real, identifiable people, or to produce material that serves an attacker.
—Any attempt to sell the work as a guarantee. We support decisions and we say so plainly.

Fig. — line we holdabstract

On dual use

The discipline that rehearses a defence could, in other hands, rehearse an attack. We state that plainly.

We do not pretend the tension away. We work only with verified clients, for defensive and planning purposes, under agreements that bind both sides. We keep what we hold to a minimum, isolate it, and destroy it when the work is done.

And we decline work we cannot stand behind. The line is not always easy to draw. A firm that will not draw it has no business doing this at all.

Make contact

If this is how you want it handled, we should talk.

The conversation begins encrypted and under NDA. Qualification is mutual and built into how we work. No form decides it for you.

Request access→