Records required
The assessment scope identifies the information needed. Redacted or anonymised material can be used where appropriate.
SECURITY AND DATA HANDLING
Information access and handling
We agree the information needed, access arrangements and handling responsibilities before an engagement begins.
Access and transfer
Authorised recipients, transfer methods and any system permissions are agreed before access is provided.
Retention and return
Storage, retention, return and deletion arrangements are documented in the engagement terms.
AI processing
Any proposed AI use involving client material requires agreement on the processing arrangements and permitted information.
LEXA AI
Lexa deployment review
The Lexa implementation proposal specifies hosting, access controls, tenant separation, data processing, model providers, retention and incident responsibilities for review before implementation.
Deployment options are agreed for each client. Certification and independent-assurance claims are made only where supporting reports are available.
Please do not submit customer records, passwords or confidential regulatory material through the website enquiry form.
Discuss your requirements