Guides and films for people who handle sensitive work.

Product updates, security guides and practical advice for lawyers, property managers, investigators and HR teams.

Films

Four short films, each under a minute.

Articles

RSS feed
How to Write a Privacy Notice in Plain Language

How to Write a Privacy Notice in Plain Language

A privacy notice people can actually read: what it must cover, a section-by-section structure, plain-language rewrites of the usual legalese, and how to keep it true.
How to Share Files With Clients in a Privacy-Compliant Way (GDPR and Beyond)

How to Share Files With Clients in a Privacy-Compliant Way (GDPR and Beyond)

Email attachments are the leading cause of reportable data breaches in small firms. What privacy law actually expects, and the sharing methods that satisfy it.
How Long Should You Keep HR Records After an Employee Leaves?

How Long Should You Keep HR Records After an Employee Leaves?

There is no single answer — but there is a method. How to set a retention period for each kind of employee record, and how to actually enforce it.
Seven Subject Access Request Mistakes to Avoid

Seven Subject Access Request Mistakes to Avoid

Where organisations go wrong when someone asks for their personal data: missed clocks, narrow searches, over-redaction, under-redaction, and losing track of what was sent.
A Client Confidentiality Checklist for Professionals

A Client Confidentiality Checklist for Professionals

Confidentiality fails in ordinary places: a wrong autocomplete, an open screen, a shared folder. A checklist covering people, devices, email, storage, sharing and disposal.
How to Audit Who Has Access to Your Files

How to Audit Who Has Access to Your Files

A practical, one-afternoon method for finding out who can open what: list the places, list the people, compare against need, fix, and record what you did.
Document Access Rules for Remote and Hybrid Teams

Document Access Rules for Remote and Hybrid Teams

When people work from home, cafes and phones, the office door no longer protects anything. Practical access rules for remote and hybrid teams handling sensitive records.
Secure Destruction: Proving You Deleted What You Said You Would

Secure Destruction: Proving You Deleted What You Said You Would

Deleting records on schedule is half the job. The other half is being able to prove it: what was destroyed, when, how, under which rule and by whom.
What to Do After a Data Breach: The First 72 Hours

What to Do After a Data Breach: The First 72 Hours

A practical hour-by-hour guide for small organisations: contain the breach, preserve evidence, work out who is affected and meet any notification duties.

Open your first case today

Free for up to 5 cases. Or look around the live demo first, no sign-up.