Security & Data Handling

Evaluation without exposure

Most of our engagements require no production data at all. Where data is shared, it is handled under a data processing agreement, kept to the minimum needed, and deleted after delivery.

Engagement modes

Three ways to run an evaluation

No-data mode

The default. Test suites are built entirely from synthetic and public domain-representative material. Nothing confidential leaves your organisation.

Redacted-data mode

You share redacted or approved sample material under a data processing agreement. We use it only to design and run the agreed tests, then delete it.

Client-side mode

For restricted environments, the evaluation runs inside your infrastructure. We receive outputs and scores, not source data or model access beyond the agreed scope.

Our practices

How client material is handled

Data processing agreement available for every engagement that involves client material
Client material is deleted after report delivery, with deletion confirmed on request
Client information is never used to train models, build benchmarks for other clients, or produce marketing material without written consent
Material is encrypted in transit and at rest, with access limited to the personnel working on your engagement
Third-party model providers are used only where the agreed scope requires calling a model API — and we tell you which providers before testing begins
The public live demo sends questions to Groq for processing; it is designed for synthetic and public examples only, and document upload is disabled
Suspected incidents affecting client material are notified to the affected client without undue delay

Security questions or reports: hello@dalilgroup.co.uk

Have a constraint we haven't covered?

Tell us your data-sharing requirements and we will design the engagement around them — not the other way round.

Book an Intro Call →