Secure & Confidential Client Data Handling
Your financial records are sensitive. This is how we approach confidentiality, access and secure file sharing.
Confidentiality is part of the service
Client information is handled with strict confidentiality, restricted access and secure file-sharing practices. We collect only what is needed for the agreed work, limit who can see it, and delete it when it is no longer required.
The seven principles below apply to every engagement. They describe our working practices, and we explain their limits openly further down this page.
How we protect your information
Separate client folders
Each client’s files are kept in their own dedicated folder, never mixed with another client’s data.
Restricted access
Only team members who need a client’s information for the agreed work are given access to it.
Two-step verification
Accounts used to handle client information are protected with two-step verification.
No documents over WhatsApp
Bank statements, payroll and other confidential records are not requested or sent through WhatsApp. It is for enquiries and coordination only.
No password sharing
We do not ask for your software passwords by email or chat. Where access is needed, we use authorised-user access set up by you.
Secure report delivery
Final reports are shared through restricted-access links rather than open attachments.
Retention & deletion
Data is kept only as long as your agreement requires and is then securely deleted.
Agreement in writing
A written confidentiality and data protection agreement can be put in place before any records are shared.
From first document to secure deletion
Receive
Documents are requested through the channel we agree with you, never over WhatsApp, and stored in your dedicated client folder.
Work
Only authorised team members work on your records, using accounts protected with two-step verification.
Deliver
Reports are delivered through restricted-access links, with access limited to the people you name.
Retain & delete
Data is retained for the period set out in your agreement and then securely deleted.
What we ask of you
Security works best when both sides follow the same simple rules. These steps help keep your information protected.
- Use authorised-user accessIf we need to work inside your accounting software, please invite us as a user rather than sharing your login.
- Keep credentials privateNever send passwords, banking logins, card numbers or one-time codes by email, chat or the contact form.
- Name who may receive reportsTell us who in your organisation should have access to your reports so we can restrict links accordingly.
- Confirm retention preferencesLet us know how long you need us to keep your records so this can be written into your agreement.
An honest note on limits
No system can promise absolute security, and we do not claim to. Our practices reduce risk but cannot remove it entirely. Files are held on third-party cloud services whose own security and terms also apply. Aurevia Group does not hold ISO 27001, SOC 2 or similar certifications. For more on how website enquiries are handled, see our Privacy Policy.
Data security FAQ
Do you use end-to-end encrypted storage?
Our standard working setup uses access-controlled cloud storage with restricted client folders and two-step verification. This is not the same as end-to-end encryption. If your data is especially sensitive and you need a different arrangement, such as an encrypted storage service, please raise it before work begins so we can agree it in writing.
Can I ask for a confidentiality agreement?
Yes. A written confidentiality and data protection agreement can be put in place before any records are shared.
Are you certified under a security standard?
No. The practices on this page describe how we work. They are not a formal certification such as ISO 27001 or SOC 2, and we do not claim one.
What should I do if I sent something sensitive by mistake?
Contact us straight away at aureviagroup505@gmail.com so we can help you decide on next steps, and consider changing any credential that may have been exposed.
Let’s Bring Clarity to Your Numbers.
Tell us about your business and the support you need. We’ll respond with a clear, practical way forward.