Confidential by default
Non-public business, operational, technical, commercial and personal information received for an enquiry or engagement is treated as confidential subject to the applicable agreement and law.
Confidentiality & Data Stewardship
Treat client information as entrusted operational material.
RiseSI’s default approach is confidentiality, limited use, proportionate access and no client publicity without permission.
Default approach
Use information only for the agreed relationship and protect it in context.
This statement is a public description of practice. It does not itself create an NDA or override the confidentiality, data-processing, security or retention terms in an applicable written agreement.
No assumed publicity
A client’s name, logo, project, screenshots, results or relationship are not used publicly without appropriate permission.
Purpose-limited use
Information is used to assess, scope, deliver, support or administer the relevant work and meet legitimate legal or security needs.
Proportionate access
Access is limited to authorised people and providers with a relevant need, using controls appropriate to the information and deployment.
Controlled environments
Client data should be kept in the agreed systems, accounts and locations rather than copied into uncontrolled personal stores.
Responsible completion
Return, export, retention and deletion are handled according to contract, lawful obligations, backup constraints and the agreed transition pathway.
Data stewardship
Client data remains connected to purpose, ownership and control.
- Data categories, roles and permitted uses are clarified for the deployment.
- Access, environments, transfers and provider responsibilities are considered before substantive processing.
- Security measures are selected according to sensitivity, risk and agreed architecture.
- Changes that materially affect data exposure or processing are brought into the control pathway.
- Incident handling, cooperation and notifications follow the applicable agreement and law.
Mutual responsibility
Good stewardship depends on both parties.
Clients should provide only information they are authorised to share, identify special or regulated data, control their own user access and notify RiseSI when roles or risks change. RiseSI should raise material concerns, use information within the agreed purpose and preserve an accountable handling pathway.
A separate NDA or data-processing agreement can be considered where the sensitivity, law or engagement warrants it.
A practical next step
Discuss the digital capability your business needs next.
A concise explanation of the company, current process, problem, users and intended outcome is enough for the free enquiry review.