Trust & references

This page tells you what to expect from working with AttriEdge, and what trust signals you should look for from any compliance operations partner.

Confidentiality and NDA

Every engagement starts with a one-page mutual NDA, signed before any substantive technical discussion. If you have a standard NDA you prefer, we use yours.

The diagnostic call is treated as if you’ve signed an NDA from minute one. Anything discussed remains confidential whether you convert to a retainer or not.

Data handling during engagements

During retainer engagements, we typically need access to:

• Your compliance automation platform as an “Advisor” or “Consultant” role
• Your ticketing system (Jira, Linear) as an “Observer” or “Member”
• Your scanner outputs (Tenable, Qualys, Snyk) as a “Viewer”
• Your identity provider (Okta, Google Workspace) as an “Auditor” or “Read-only” role
• A shared Notion or Airtable workspace we set up for your engagement

We do not typically need:

• Production database access
• Customer PII or PHI access
• Source code repository write access
• Cloud console (AWS/GCP/Azure) write access

If your situation requires anything broader, we discuss it and document it in the engagement scope.

Security on our side

• All client data lives in Notion workspaces with 2FA enforced
• All client communications go through Slack Connect or your platform of choice
• Email is on Google Workspace with 2FA and DMARC enforcement
• Local machine is encrypted, screen-locked, regularly updated
• No client data on USB drives, no client data in personal accounts

References

AttriEdge launched in 2026. Client references appear here only after an engagement passes the 90-day mark and the client gives written permission, no cherry-picked logos, no paid quotes.

In the meantime, judge us on the work itself: book the diagnostic and you’ll have the Evidence Index Blueprint in your hands within 48 hours of the call. The quality of that artifact is the reference.

Insurance and liability

• Professional indemnity and cyber liability: coverage details and certificates are provided on request during vendor onboarding
• Maximum liability per engagement: capped at fees paid in the 12 months prior, the industry-standard term

Audit partners and referrals

AttriEdge does not provide licensed SOC 2 audits. When you need one, we introduce you to established US-licensed CPA firms suited to your size and framework, and we earn no referral fees, so the recommendation is based on fit alone.

Press, talks and external content

When available, Hemant will list speaking engagements, podcast appearances and external publications here.

For inquiries about speaking or interviews: [email protected].