- Where the data comes from
- Wherever it already lives: a CRM, an accounting package, an online shop, a case management or membership system, spreadsheets, email exports. One export is usually enough. Where exporting is impractical, a read-only connection can be agreed in writing instead.
- What access is needed
- Read access to the records in scope, and nothing more. No write access to your live systems is needed, and nothing in them is changed.
- Terms
- Everything is covered by terms agreed in writing before anything is provided. How private the data is gets agreed at the outset, and it is treated accordingly.
- Sensitive information
- If required, anything sensitive can be anonymised by script, on our own systems, before any AI or third-party tool has access to it. That is agreed with you first, and where it applies, names and contact details are not sent to a third-party model in the clear.
- Where the gaps are filled from
- Public and licensed sources: Companies House, company websites, professional profiles and established business data providers.
- Afterwards
- For a one-off job, our working copy is deleted after an agreed period following delivery. If you keep us on and an ongoing service needs it retained, that is agreed in writing.