Your clients' data, handled with discipline
Before any live client data is processed, we agree the security, access and data-protection terms for the engagement, and put them in place. This page describes that onboarding framework. It is not a certification claim.
Agreed before live data
Each engagement onboards against the same framework. Only controls actually in place for an engagement are represented as operational.
Confidentiality
- Confidentiality obligations on our team
- Non-solicitation and controlled client contact
- Terms documented before onboarding
Access
- Role-based, individually authorised access
- Controlled cloud access to agreed systems only
- Documented access management, joiner and leaver steps
Data protection
- A data-protection agreement covering cross-border processing
- Transfer safeguards appropriate to the partner's jurisdiction
- Recognition of local requirements such as Singapore PDPA
Retention and deletion
- Agreed retention periods
- Return or deletion of data at the end of an engagement
- Documented on request
Incident response
- Named responsibilities on both sides
- Notification route and timing agreed in advance
Operating process
- Documented workflows and responsibility matrix
- Review stages recorded for each piece of work
What we do not claim
We do not represent GetAccounted Global as holding ISO 27001, SOC 2 or similar certifications. We do not describe pending measures as completed, and we do not offer absolute security guarantees. Security is agreed, implemented and reviewed engagement by engagement.
Before you write to us
Public enquiry forms are for anonymised workload information only. Identifiable client records are exchanged through a secure channel after the confidentiality and data-protection terms are agreed.