How I Protect YOUR Information

Before we work together, you should know what happens to what you tell me. Here it is, in plain language, no legal training required to follow it.

There is an NDA I am willing to sign before our first call. Not after we've scoped the work. Not once you've committed to an engagement. Before the first conversation, so you can speak freely from the first minute. Most consultants ask you to trust them and sign later. I'd rather protect the conversation up front and earn the rest.

Here is what that protection actually means for you.

What you share stays yours

The data, documents, and context you give me remain your property. I use them for our work together and for nothing else. I don't repackage your information, and I don't carry it to anyone else.

I will not use what I learn against you

My work involves finding the weak points in a system - that is the job you're hiring me to do. When I find yours, I am bound not to disclose them, trade on them, or use them to your disadvantage. Finding your vulnerabilities is what you're paying for. Protecting them is the promise that comes with it.

I name you as a client only after we've actually worked together and never the substance

Once we've completed a real engagement, I may reference you as a client, the way any professional references their work. I will never disclose what we worked on, what I found, or anything you told me in confidence. Your name on a list; never your business on the table.

Your material never touches a public AI

I use AI extensively in my practice, and I know exactly where the risk lives. Anything of yours that is confidential is processed only on local, air-gapped models running on my own hardware, never on cloud services that learn from what they are fed. Your information does not become someone else's training data. Full stop.

If the law ever compels disclosure, I protect you to the last inch

Should a court order or subpoena ever require me to produce information, I will tell you first where I'm permitted to, give you the chance to protect it, and disclose only the minimum the law demands. And I'll be honest with you about one thing: a consultant's confidentiality is a contract, not a legal privilege. I won't promise you protection I can't lawfully deliver but everything I can lawfully do to shield your information, I will.

Bring your own paper if you'd rather

Many organizations have their own NDA, and I'm glad to work from it. What matters to me isn't whose form we use, it's that the protection runs both directions and that you can talk to me without watching your words. Send me yours, sign mine, or we'll reconcile the two. That's a solved problem, not an obstacle.