Your client's data, handled like it is your reputation.
You answer for how your subcontractor treats client data. Email me with questions first.
- Least access, inside your systems
- The narrowest access that finishes the task, revoked when it closes. I work in your tenant or repo; any copy I must hold stays on an encrypted disk.
- No third parties, no exceptions
- The person you brief does the work. Nothing is offshored, and client data never goes into a tool or service you have not approved in writing.
- Deleted when you say, confirmed in writing
- On request or thirty days after the task closes, whichever is sooner. The confirmation email is written so you can forward it to your client.
- Your NDA and non-solicit, signed first
- Yours, signed before you send anything about the client. I never approach agency clients or take direct work that reaches me through an agency.
If the data is regulated, say so first
Health, financial, education and government data can need a BAA, a retention rule or an access log. Tell me first, and I will meet it in writing or decline the job.
Questions agencies ask
How do we communicate?
Whatever you already use: email, Slack or Teams as a guest, a shared board. I send a short note after each working session and never join client calls.
Can I white-label the documentation too?
Yes. Handover notes, data dictionaries and runbooks come in your template with your name on them, or unbranded if you would rather add your own.