Your disclosure is confidential. We treat it that way.
Draft filings, unpublished financials, board and employee data, pre-announcement ESG results — the material we handle is sensitive by definition. So confidentiality isn’t a policy page we bolt on; it’s how the firm is built: NDA from the first email, one in-house bench, and client material that never touches public AI.
- 01NDA from your first email
- 02No public generative-AI on client material
- 03100% in-house — no freelance chains
- 04ISO 27001-aligned handling
- 05PDPA & GDPR compliant
How your material is protected.
Five things we do by default — several of which are quietly not true at firms that outsource disclosure or translation.
NDA from the first email
Confidentiality applies before anything is signed. We’ll sign yours or provide ours at the outset — the default for pre-publication filings, not an extra.
No public generative-AI
Your unpublished disclosure is never pasted into consumer AI tools where it could be retained or used for training. Handled inside our environment, under control.
100% in-house bench
No freelance chains, no offshore marketplaces — the invisible risk in outsourced translation and disclosure. One named, accountable team, end to end.
ISO 27001 -aligned
Access control, secure transfer, least-privilege, secure disposal — plus an ISO 17100-certified translation workflow. Security questionnaires and DPAs accommodated.
PDPA & GDPR
Personal data inside your ESG and corporate filings is handled to Thailand’s PDPA and GDPR principles: lawful basis, minimisation, secure retention and disposal.
Where AI fits — and where it doesn’t.
We use technology to work faster, never at the cost of your confidentiality.
Client material is never put into public AI tools.
Unpublished disclosure, financials and draft filings are handled by our in-house bench under NDA, inside our own controlled environment — not pasted into consumer generative-AI services where inputs can be retained or used to train models. Where technology assists the work (terminology management, quality checks), it operates under controls that keep your data private and accountable. If your procurement needs this in writing, we confirm it in the engagement terms.
Confidentiality, answered.
01Do you use ChatGPT or other public AI tools on our documents?+
No. We do not put client material into public generative-AI tools. Your unpublished disclosure, financials and draft filings are handled by our in-house bench under NDA and are never pasted into consumer AI services where they could be retained or used for training. Where we use technology, it is under controls that keep your data private and inside our environment.
02Who actually sees our material?+
Only the named, in-house Othello bench assigned to your engagement, working under NDA from the first email. We do not fan your documents out to freelance chains or offshore marketplaces — a common and largely invisible risk when disclosure or translation is outsourced. One accountable team handles the work end to end.
03How do you handle personal data under Thai PDPA?+
We handle personal data in line with Thailand’s Personal Data Protection Act (PDPA) and, for cross-border work, GDPR principles — lawful basis, data minimisation, purpose limitation, and secure retention/disposal. Personal data in the material we process (employee, board or stakeholder information inside ESG and corporate filings) is treated as confidential and access-controlled.
04Is an NDA required, or is confidentiality automatic?+
Confidentiality applies from your very first email — before any NDA is signed. We are happy to sign your NDA, or provide ours, at the outset of any conversation. Because so much of what we handle is pre-publication disclosure and legal filings, NDA-from-first-contact is our default, not an add-on.
05What security standards do you align to?+
Our handling is aligned to ISO 27001 information-security principles (access control, secure transfer, least-privilege, secure disposal) and our translation workflow is ISO 17100-certified. We confirm the specific controls in place for your engagement in writing, and can accommodate a client security questionnaire or DPA where your procurement requires one.
Start the conversation under NDA.
Send the brief — confidentiality applies from the first email, and we’ll sign your NDA or provide ours before anything else.
