What we hold, and what we do with it.

The records we need to audit your financial statements: ledgers, bank statements, contracts, payroll data, board minutes, and the working papers we produce from them. Where you connect a system to us, we take only the folders you have granted and we log every read — you can see the whole list in the portal at any time.

Client records and audit documentation are stored in London (AWS eu-west-2), encrypted at rest with a key we control, and the database sits in the same region. Model inference runs in the UK and EU only.

That last point is enforced rather than promised: the credentials our application uses are permitted to call EU-scoped model endpoints and are explicitly denied the global and US ones, so a change in our own code could not route your data out of the region.

Audit documentation is retained for at least six years from the date of the auditor's report, as ISQM (UK) 1 requires. Once an audit file is assembled it is locked: it cannot be altered or deleted, by us or by anyone else, until that period has passed.

Before the file is assembled the audit file is a working file and can be amended — that is how audits work. What cannot be amended, at any stage, is the record of who did what and when.

Documents you send us with a quote request are deleted if you do not go ahead.

Your data is not used to train any model, by us or by any vendor we use. We do not sell it, and we do not share it beyond the sub-processors listed on this site and anyone you or the law require us to.

You have the rights UK GDPR gives you over personal data we hold. Some of it we are legally required to retain for the statutory period regardless of a deletion request — audit documentation is evidence, and we cannot destroy it on request. We will always tell you which category a request falls into rather than refusing without explanation.

A data processing agreement is available on request, and we will sign yours if you prefer.