Authorization and restricted information
The approved scope identifies what may be accessed and handled. We do not ask prospects to send passwords, identity documents, medical records, account numbers, or confidential contents through the initial inquiry.
Ember tip: You do not need to share everything
Access is limited to what is needed for the agreed work. Sensitive information should not be shared simply because it happens to be stored near materials that are within scope.
Initial inquiries should not include passwords, Social Security numbers, full account numbers, identity documents, medical details, or copies of confidential records.
Controlled digital access
Access is limited to the approved processor and processing conditions. Digital work occurs only in the tools and storage locations approved for the engagement.
Defined transfer procedures
Where transfer is required, receipt, movement, storage, return, and relevant responsibilities are established before transfer begins.
Physical materials
Eligible paper work is scoped individually. Workspace, storage, environmental, privacy, and handling requirements are agreed before physical documents are processed.
Working copies
The need for temporary or working copies, where they may exist, and how they will be handled are addressed within the project procedure.
Retention, deletion, and disposition
We do not make irreversible content decisions without authorization. Any agreed deletion, return, transfer, retention, or disposition is defined within the engagement.
Quality control and exceptions
Exceptions, unreadable materials, unclear status, and decisions requiring client input are identified rather than silently resolved.
Documented closeout
Closeout confirms delivery and the agreed status of physical materials, access, working copies, and outstanding exceptions.