FAYD / Confidentiality approach

Clear boundaries before any data is shared

This approach explains how FAYD begins a conversation about sensitive commercial information before a review starts.

Applies to the initial conversation and scoping stages

The first conversation

An opportunity can be discussed using a general description of a supplier, category, or spend period. Contracts and invoices are not needed at this stage.

Scope before transfer

Suppliers, categories, period, and the review purpose are defined before any data request is prepared.

Engagement terms

Confidentiality, processing purposes, access roles, hosting, encryption, and retention requirements are agreed before commercial data is shared.

Minimum necessary

Requested data is limited to the agreed recovery scope. Any expansion requires a clear agreement.

Evidence files

Findings are connected to the relevant terms and records so the client team can verify and discuss them.

Closeout

Retention, return, or deletion is addressed in the engagement terms and managed according to the agreed closeout process.