Security & Data Use
Security, Data Protection and Responsible AI
This page explains Safor Consultants’ practical approach to client information, technology, SaaS tools and responsible AI use. It should be read alongside our Privacy Policy.
Safor Consultants uses secure, proportionate and business-grade tools to support client delivery, reporting and portfolio insight, while keeping confidentiality, professional judgement and responsible use at the centre of our work.
How Safor Consultants uses technology
Safor Consultants uses established business and productivity tools to deliver consultancy services, manage communications, prepare reports, support portfolio analysis and maintain business records.
This may include email, document storage, collaboration tools, spreadsheets, presentation tools, website platforms, reporting tools and other SaaS services used to support client work.
Technology is used to improve clarity, consistency, analysis and delivery efficiency. It does not replace professional judgement, client ownership of information or agreed ways of working.
Client information and confidentiality
Safor Consultants treats client information as confidential and applies appropriate controls when handling, storing, analysing or reporting client data.
Client information is used only for the purpose of delivering agreed services, supporting communication, preparing outputs, improving reporting quality and providing appropriate advice or recommendations.
Access to client information is managed on a need-to-know basis. Where associates are involved, they are expected to follow Safor Consultants’ confidentiality, security and professional standards.
Data protection
Safor Consultants aims to handle personal data lawfully, fairly and proportionately.
Where personal data is provided as part of an engagement, it should be limited to what is necessary for the work being undertaken. Safor Consultants does not seek unnecessary personal data and will normally focus on project, portfolio, delivery and business information.
Personal data may be processed using secure business systems and SaaS tools where this is necessary to deliver services, manage communications or maintain business records.
Use of SaaS and cloud tools
Safor Consultants uses cloud-based and SaaS tools to support normal business operations and client delivery. These may include tools for email, document management, collaboration, analysis, reporting, presentations, website management and business administration.
Reasonable steps are taken to use reputable services, apply appropriate access controls and keep client information secure. This includes practices such as multi-factor authentication, strong passwords, least-privilege access, secure storage and appropriate backup arrangements.
Responsible use of business-grade AI
Safor Consultants may use business-grade AI tools and AI-supported methods to assist with analysis, structure, drafting, summarisation, quality review, reporting improvement and internal productivity.
Where client information is involved, Safor Consultants uses business-grade AI environments rather than general public AI tools. These environments are selected to provide stronger business data protections, including controls intended to reduce the risk of client information being used to train public models or being exposed outside the agreed working environment.
AI-supported methods support professional work; they do not replace professional judgement. Safor Consultants reviews and validates outputs before they are used in client-facing advice, reports or recommendations.
Client confidentiality remains central. Specific data-handling, confidentiality or tool-use requirements can be discussed and agreed as part of the engagement.
Human review and professional judgement
Safor Consultants does not rely on automated outputs without review. Analysis, reporting, assurance comments and recommendations are subject to human review and professional judgement before being shared with clients.
AI-generated or tool-assisted content is treated as a support input. Final interpretation, judgement and advice remain the responsibility of Safor Consultants and
Security practices
Safor Consultants works to practical security-first principles, including:
Multi-factor authentication where available
Strong password practices
Least-privilege access
Secure cloud storage
Device security
Appropriate backups
Customer confidentiality
Incident awareness and response
Regular review of tools, access and working practices
Safor Consultants’ longer-term objective is to align with recognised good practice such as Cyber Essentials as the business matures.
Client responsibilities
Clients also play an important role in protecting information. Safor Consultants expects clients to share information through agreed routes, avoid sending unnecessary personal or sensitive data, and confirm any specific handling requirements at the start of an engagement.
Where a client has specific security, data protection or tool-use requirements, these should be discussed and agreed as part of the engagement setup.
Review and improvement
Safor Consultants keeps its technology, security, data handling and responsible AI practices under review. Working practices may evolve as the business, client requirements, technology and regulatory expectations develop.