Information security

Our position

Our work involves commercially sensitive material and, at times, information about identifiable people. We protect it with measures proportionate to a specialist senior practice, applied without exception.

What we do

• Client material is held on reputable, professionally managed cloud services, not on unmanaged local storage.
• Devices used for client work are encrypted, and access to our accounts is protected by multi-factor authentication.
• Access follows need: client material is available to the people working on that engagement, not to everyone.
• Software and devices are kept current with security updates.
• If a security incident affecting personal information occurred, we would assess it immediately and meet our notification duties to clients, to affected individuals and to the Information Commissioner's Office where required.
• Client-specific handling requirements are accommodated on request and recorded in the engagement terms.

Questions about our security practices, including in supplier due diligence, go to hello@fadefain.com.