Information within scope

Firm identity and reference metadata, names and practice roles, necessary governance rationale, source versions, internal review dates and minimal correspondence metadata.

Information to exclude

Do not enter Government Gateway credentials, unnecessary personal tax detail or named criminal or no-conviction status. Redact documents before upload. A statement that someone has no convictions can itself be criminal-offence data.

See the ICO criminal-offence data guidance and data minimisation guidance.

Evidence and account boundaries

Evidence is held privately, stored with integrity checks and subject to account and role authorization. Audit records preserve governance history. Keep your own copies of records you are required to retain.

Before production use

Our controller identity, processor terms, retention periods, subprocessor list, privacy contact and rights procedure are published here as they are confirmed.