How do you handle confidentiality and data protection?

Confidentiality: - Every mandate includes a confidentiality clause - Reports and supporting data are shared only with the client and expressly authorised parties (banks, auditors, counsel) - Internal access is restricted to the assigned team - We never publish client-identifying information without express written consent Data protection: - Moroccan Law 09-08 compliant - GDPR aligned for European clients (data portability, right to erasure, etc.) - CNDP declaration filed Retention: - Client data retained 10 years post-delivery (legal requirement for professional services) - Secure deletion beyond retention period Technical safeguards: - TLS 1.3 encrypted communications - Encrypted file storage (AES-256) - Two-factor authentication for cloud access - Access logs maintained NDAs: standard and bespoke NDAs available on request, including for pre-transaction due diligence where anonymity is critical.