Confidentiality and data handling

Your first message should outline the matter, without including supporting materials.

• type of matter: due diligence, tracing, assets, debt or dispute
• the countries or regions involved
• the intended outcome and any critical deadlines
• your preferred contact method

Do not send sensitive information until we have assessed the matter and agreed a communication channel.

• passports and personal data of the parties involved
• contracts, statements, correspondence or documents
• case numbers, account numbers and identifiers
• passwords and access credentials - we never need them

Documents are requested only after we have assessed whether the work can lawfully proceed, in limited stages and through an agreed channel. Each request explains why the document is needed and how it will be used.

Access to materials is restricted to the team assigned to the project. The more sensitive the matter, the smaller that team. External specialists are involved only with the client's consent and to the extent necessary.

The transfer channel is selected according to the sensitivity of the materials and the client's circumstances, including the risk that their own devices may be compromised. The method for transferring each type of document is agreed separately.

BLACKFILE requests and processes only the data needed for the specific assignment. We do not collect irrelevant information about third parties; any such information encountered incidentally is excluded from the materials.

If a client identifies an inaccuracy in the materials, it is checked against the sources and corrected. Changes to material conclusions are recorded.

Requests to delete materials are considered in light of the contractual and legal requirements of the particular matter. The procedure and timeframes are agreed in the project terms.

AI tools help process large volumes of publicly available data, but do not make decisions: an analyst checks material findings against primary sources. Client materials are not uploaded to public AI services.

Personal data is not included in page URLs, link parameters or analytics systems. Website forms transmit only the information you enter and the operational context of your enquiry.