Security & Trust
This page describes how MyDataDynamo handles client data, our confidentiality practices, and relevant compliance posture. It is intended for procurement, legal, and IT security reviewers.
Data handling policy
Client data accessed during engagements is used solely for the purpose of delivering the contracted scope of work. We do not retain client data beyond the engagement period unless explicitly agreed in writing. Data is deleted or returned at engagement close per the terms of the applicable statement of work.
Where client data resides
During engagements, client data may reside in: (1) client-controlled cloud environments (Azure, AWS, GCP) where we operate with scoped access credentials; (2) local development environments protected by full-disk encryption and MFA on all devices. We do not operate any MyDataDynamo-controlled cloud environments — all work is performed within client-provisioned infrastructure.
Subprocessors
MyDataDynamo uses the following subprocessors in the delivery of services: Anthropic (Claude API — used for AI model inference; data submitted is subject to Anthropic's enterprise data handling terms); Microsoft (Azure, Fabric, Power BI — infrastructure and tooling); GitHub (source control — code and configuration only; no client data is stored in repositories). We maintain a current subprocessor list and will notify clients of material changes.
Confidentiality and NDAs
All engagements are covered by a mutual non-disclosure agreement executed prior to discovery. We do not discuss client names, project details, or data characteristics with third parties. Associates engaged on client work execute confidentiality agreements as a condition of engagement.
Client data and model training
Client data submitted to Claude via the Anthropic API or Azure AI Foundry is not used to train Anthropic's models under the terms of Anthropic's enterprise and API agreements. MyDataDynamo does not use client data for any purpose other than delivering the contracted engagement.
Professional indemnity insurance
MyDataDynamo carries professional indemnity (errors and omissions) insurance. A certificate of insurance is available on request — please contact layak@mydatadynamo.com.
Security practices
MFA is required on all accounts used in client engagements. Access credentials are scoped to the minimum required (least-privilege) and managed via Azure Key Vault where applicable. Engagement access credentials are revoked at engagement close.
Security inquiries
Direct security and compliance inquiries to layak@mydatadynamo.com.