Protecting the business.
WHAT TO ESTABLISH
What is confidential What may not be shared or reused What happens to information when the arrangement ends
WHAT TO PUT IN WRITING
A confidentiality clause in the agreement.
WHAT IT SHOULD COVER
Customer information Business information Credentials Anything not public
FOR CUSTOMER DATA
Access carries obligations under data protection frameworks.
Establish what they may access and why.
WHAT TO LIMIT
Exports of customer data Access to financial records Anything not needed for the role
WHAT TO TELL THEM
What they may and may not do with information they see.
Specifically, not generally.
FOR AI TOOLS
If they use them, establish what may not be sent.
Our AI articles cover this.
WHEN THE ARRANGEMENT ENDS
Remove access Ask for return or deletion of business information Change shared credentials
WHAT TO RECORD
That this was agreed.
