Our Commitment
Confidentiality is central to how Vardhnova works. When you engage us for research and development, your idea, your data and your outcomes are yours. We have built our working practices and infrastructure around protecting client and project information at every stage.
Our Promise to You
- •A mutual NDA is signed before detailed project information is shared.
- •Your project data is never shared with other clients or used to benefit another engagement.
- •Your data is not sold, licensed or monetised, and is not used to train third-party models.
- •Ownership of your idea and project outcomes stays with you, as set out in the project agreement.
These are hard commitments, reflected in our agreements and our internal controls.
Confidentiality First
We ask that you avoid sending confidential technical details through the initial website form. Detailed information is exchanged only after appropriate confidentiality arrangements are in place. Access to a project's information is limited to the people working directly on that project.
Data Encryption
- •In transit: communications are encrypted using modern TLS.
- •At rest: stored data is encrypted using strong, industry-standard encryption.
- •Key management: encryption keys are managed through secure key-management practices.
Access Controls
- •Least privilege: access is scoped to the minimum needed for a task.
- •Role-based access: team members access only the information their role requires.
- •Authentication: internal systems require strong authentication.
- •Review: access to project data is reviewed periodically.
Data Isolation
Each client's project data is kept logically separated. Work, records and outputs for one project are not accessible from another, and are not co-mingled across clients.
Infrastructure Security
- •Network security: firewalls and standard protections safeguard our systems.
- •Updates: systems are kept patched and current.
- •Resilience: important data is backed up to prevent loss.
- •Monitoring: systems are monitored for suspicious activity.
Incident Response
In the unlikely event of a security incident affecting your data, we will act to contain and remediate it, and will notify affected clients promptly with a clear account of what happened and the steps being taken.
Data Retention & Deletion
- •During a project: data is retained for as long as needed to deliver the agreed work.
- •After completion: records are retained only as required by the agreement and applicable law.
- •On request: you may request deletion of your data, subject to legal and contractual retention needs.
Contact Us
Questions about our security practices, or want to report a concern?