Confidentiality and security
Before you send a file, we agree a secure procedure and send a confidentiality statement. Analysis runs locally, without public AI services.
Before work starts
We send a signed unilateral confidentiality statement with our first reply. You do not need to sign it. We can review your company’s own proposed agreement in advance.
Confidentiality covers the file contents and the existence of the assignment itself.
Secure transfer
We can use screen sharing for an initial assessment. The analysis itself requires a copy of the file. We agree access through your storage, an encrypted archive or an in-person handover according to data sensitivity and your company’s rules.
For OneDrive or SharePoint, grant the named recipient access for the agreed period and allow download of the copy needed for analysis. Use AES-256 encryption for archives. Send the password through a separate channel, such as a phone call, never in the same email as the file.
Working with your file
We work with a copy; you retain the original. During diagnostics, we do not run macros or recalculate the workbook. Client files are never uploaded to public AI services or published.
We delete the file copy and working data within 30 days of report delivery unless expressly agreed otherwise. The report may be retained longer as part of the assignment records.
Personal data in the workbook
Where possible, replace personal data and sensitive values before transfer while preserving structure, formulas and data types. Changed values may affect some findings, so we discuss replacements in advance. Where personal data is transferred, we conclude a data processing agreement.
Insurance and liability
Surman s.r.o. holds professional liability insurance. We provide details of the coverage before contracting. Compensation for proven loss and liability limitations are governed by the terms and conditions.