How do you handle confidentiality and data protection?

**Confidentiality:** - Every mandate includes a confidentiality clause - Reports and supporting data are shared only with the client and expressly authorised parties (banks, auditors, counsel) - Internal access is restricted to the assigned team - We never publish client-identifying information without express written consent **Data protection:** - Moroccan Law 09-08 compliant - GDPR aligned for European clients (data portability, right to erasure, etc.) - CNDP declaration filed **Retention:** - Client data retained 10 years post-delivery (legal requirement for professional services) - Secure deletion beyond retention period **Technical safeguards:** - TLS 1.3 encrypted communications - Encrypted file storage (AES-256) - Two-factor authentication for cloud access - Access logs maintained **NDAs:** standard and bespoke NDAs available on request, including for pre-transaction due diligence where anonymity is critical.