OUR APPROACH
01
Your organisation controls the agreed purpose and decisions.
02
Access and sharing follow authorised roles and recipients.
03
Information has an agreed lifecycle, including service exit.
CLIENT CONTROL
Your information supports your organisation’s decisions.
For client operational services, your organisation determines why information is collected, the approved scope, who receives it and what action follows. ITL handles information on your documented instructions to deliver the agreed service.
Client information does not become an ITL asset simply because we process it or prepare a report. The service arrangements distinguish your data, agreed deliverables and ITL’s existing methods and materials.
We use operational information for the agreed service purpose. Any additional use requires a separate, explicit agreement.
FROM SETUP TO SERVICE EXIT
Clear arrangements throughout the information lifecycle.
01
Agree
Define the purpose, information needed, authorised recipients and retention arrangements.
02
Handle
Collect and manage information in a separate workspace for your organisation, with access limited to authorised roles.
03
Report
Provide appropriate information and outputs to the people you authorise.
04
Close
Review retention, remove access and arrange return or deletion in line with the agreed requirements.
WHAT THIS MEANS IN PRACTICE
Relevant information,
shared with the right people.
01
Access based on need
Access is limited to the roles and tasks required to deliver your service. Client information is kept within defined client boundaries, with access reviewed as responsibilities change.
02
Proportionate collection and reporting
We agree the information needed for the service. Reports and visual summaries are prepared for their intended audience, using aggregation where appropriate to avoid unnecessary personal detail.
03
Controlled sharing
Recipients and sharing arrangements are agreed with you. The source information, professional assessment and your organisation’s decisions remain distinguishable.
04
Agreed retention and service exit
Information follows an agreed retention schedule. Return, deletion and any required continued retention are addressed through your service arrangements, including at the end of the engagement.
BEFORE WE BEGIN
Know how your information will be managed.
We discuss your information handling requirements during service design and record the responsibilities, processing instructions and relevant safeguards before delivery. This gives your risk, security and data protection teams a clear basis for considering the service.
This page describes our approach to contracted client services. Information submitted through this website’s enquiry and CIRM™ forms is covered by our separate privacy information.
A practical next step
Bring your information requirements into the conversation.
Tell us what your organisation needs from reporting, authorised access and service governance. We will explain how those requirements shape the proposed IntaaS service.