I
Confidential by default
Everything you send is treated as sensitive without you having to say so, and without a separate agreement being required first.
Assurance
What you send us
stays yours.
Handing work to an outside party is an act of trust before it is anything else. This page sets out what we commit to, in plain terms, so the commitment is checkable rather than implied.
Four commitments
Unqualified, and not contingent on what you spend.
II
Never reused
Your material serves your engagement and nothing else. It is not repurposed, aggregated, or used to benefit another client.
III
Retained only as needed
Held for as long as your engagement and its revision window require, then removed.
IV
Yours on delivery
Full ownership of every deliverable, transferred on arrival. No attribution, no licence, no residual claim.
Anonymity
You will not appear
in our marketing.
Every quotation on this site is unattributed by design. We do not name clients, display logos, or publish case studies — not with permission and not without it.
For most firms, client names are the marketing asset. Treating them as one creates a standing incentive to ask for something you should not have to refuse. We removed the incentive.
Client references published
0
No logos. No named case studies. No exceptions.
Access
Who can see your work.
A short list, stated precisely.
You
Everything you have submitted and received, always available in your workspace.
Full access
Colleagues you have not shared with
Engagements are private to the account that opened them.
No access
Other clients
Under any circumstances, at any time.
No access
Our operations team
To resolve a fault or answer a question you have raised, and recorded when it happens.
Only where required
Controls
How the platform is held together.
The measures that make the commitments above enforceable rather than aspirational.
01
Isolated by identity
Access to any record is decided by who is asking, enforced at the data layer rather than in the interface.
02
Encrypted in transit and at rest
Standard across the platform, applied to every record without exception or configuration.
03
Privileged actions recorded
Anything consequential is written to an audit trail attributed to the account that performed it.
04
Payment handled by a specialist
Card details never touch our systems. Payment is processed entirely by a dedicated provider.
05
Credential attempts throttled
Sign-in and reset are rate limited per address and per source, and every failure is recorded and reviewed.
06
Administrative access separated
Operational tooling sits behind its own boundary, unlinked from the customer application and restricted to named administrators.
Removal
Leaving is as simple as arriving.
You can ask us to remove your material and your account at any point, for any reason, without explaining why. There is no retention period we will hold you to and no process designed to slow you down.
Deliverables already sent to you remain yours — removal covers what we hold, not what you have. Where a legal obligation requires a minimal financial record to be kept, we say so explicitly rather than quietly retaining more.
01
You ask
A single message is enough
02
We confirm
What will be removed, in writing
03
It is removed
Material and history together
04
We confirm again
Once it is done
“Our legal team's first question was what happens to the material. The answer took one paragraph and had no carve-outs in it. That was unusual enough to be memorable.”
In summary
The assurances, counted.
Zero
Client names published
Zero
Reuse of your material
100%
Ownership transferred to you
Any time
Removal on request
Detail
The questions legal and security teams ask.
Do we need a confidentiality agreement in place first?+
Not for the commitments on this page to apply — they apply from your first request. If your organisation requires a signed agreement for its own governance, we will sign yours.
Where is our material stored?+
On managed infrastructure with encryption in transit and at rest, isolated per account. If your organisation has specific residency requirements, raise them and we will tell you plainly whether we can meet them.
Is our material used to improve your service?+
No. What you send serves your engagement and is not used to benefit any other client or any general capability.
Who inside AltusBridge can read our requests?+
Only where operationally required — resolving a fault or answering a question you have raised — and every such access is recorded against the account that performed it.
What happens if you are acquired?+
These commitments travel with the material. Any successor is bound by them, and you would be told before anything changed rather than after.
How do we raise a security concern?+
Contact us directly. Security reports are read the day they arrive and answered by a person, not a ticketing system.
Confidence
Trust is easiest to give
when it is easy to check.
Everything on this page is answerable by a person. Ask us anything it does not cover.