We use secure document-handling protocols, controlled access systems, and confidentiality agreements to safeguard all client information throughout the engagement. In practice, that means the following.
Secure document handling
- Client material is stored in access-controlled repositories, never on unmanaged personal devices or open shared drives.
- Documents are transferred through secure channels. Where a regulatory authority requires a specific submission route, that route is used and nothing is duplicated elsewhere.
- Working copies are version-controlled so that what is submitted is traceable to what you approved.
Controlled access
- Access is granted on a need-to-know basis and limited to personnel working on your engagement.
- Partners in our network receive only the information required for their defined scope, under their own confidentiality undertakings.
- Access is withdrawn when an engagement closes or a person’s role in it ends.
Confidentiality agreements
- We will sign a non-disclosure agreement before you share anything substantive — you do not need to disclose your dossier to get a proposal.
- Where you have no standard form, we can provide one for your review.
- Confidentiality obligations survive the end of an engagement.
Separation between clients
- We do not use one client’s data, dossier content or commercial information for the benefit of another.
- Where a potential conflict of interest arises — for example, competing products in the same category — we raise it with you before accepting the engagement.
- Case studies and testimonials are published only in anonymised form, or with written permission.
What we disclose, and to whom
We disclose client information only to the regulatory authority the submission is directed to, to partners named in your engagement, or where we are compelled to by law. In every other circumstance the answer is no.
Ready to share something sensitive? Ask us for an NDA first — we would rather sign one you do not end up needing than receive material you were not ready to send.
This page describes our operating practice. It is supplemented, and where inconsistent superseded, by any confidentiality agreement executed between us. See also our Privacy Policy.