How we protect your information
Investigations involve sensitive records. These are the rules we work by. Each one is written into our engagement agreement.
Our commitments
- Read-only access wherever possible.
- An NDA is signed before any data is shared.
- We collect only what the incident requires.
- Every item we collect gets a digital fingerprint and a written log of who handled it, so the evidence holds up if it is challenged.
- Transfer and storage are encrypted.
- We delete your evidence on an agreed schedule. You decide whether we keep anything, and we keep nothing without your written permission.
- Nothing from your engagement is shared with anyone, in any form, without your written consent. Anything shared across clients is anonymized.
Before you send us anything
Do not email logs, passwords, customer data, or incident details. Contact us first. We agree on secure handling before any evidence moves.
Your case stays yours
We never use client materials, client names, or incident details as public proof. If we share a lesson across clients, the details are anonymized first.
Where we stand today
Protocol is early-stage and holds no third-party certifications yet. We would rather say that than imply otherwise.
Start with a call
We will explain how handling works for your situation before anything is shared.