Handling your data
A diagnostic requires access to real records. So the terms come first.
An NDA before any data moves. Read-only where read-only is enough. Your data never trains a model outside your engagement.
- 01NDA first
- Executed before any data moves, covering the engagement and surviving it.
- 02Least privilege
- Read-only where read-only is sufficient, scoped to named systems and periods, revocable by you at any time without notice.
- 03Defined retention
- Retention period agreed in writing, with certified deletion at the end of it.
- 04No external model training
- Your data is never used to train models outside your engagement, and never used to serve another client.
- 05Regulatory alignment
- Handling aligned to the Digital Personal Data Protection Act, 2023 and its Rules for personal data in India, and to GDPR requirements where EU data subjects are involved.
- 06Auditable tooling
- Your data does not enter a tool whose data handling we cannot inspect and explain to you.
Limits
What we will not do.
- Quote you a saving before we have measured your baseline.A number produced that way is marketing, and it is the reason most such numbers are never revisited after signature.
- Sell a system for a problem we have not evidenced.Including when you have already decided you want that system.
- Take an outcome-linked fee without a written measurement method.One both sides can compute independently.
- Present a finding we cannot trace to specific records in your systems.
- Take an engagement where the honest answer is that you do not need us.We would rather lose the fee than be the vendor you regret.
Where we are today. Worksmith is an early-stage company. We would rather state that plainly than imply a track record we have not yet built — which is precisely why our commercial terms put the risk of being wrong on us, and why every claim on this site is about method rather than about results we cannot yet evidence.