Trust center
How we handle your data
We use as little of your data as the work needs, agree how it is handled before we touch it, and aim to give up our access when the work ends.
In short
In an engagement we work with the minimum data a task needs, classify it by sensitivity, and agree access, retention and deletion rules up front. We can sign an NDA. What this website itself collects is listed in the privacy policy.
Last updated
01 In engagements
How do we handle client data during an engagement?
- Data minimization. We ask for the data a task needs, and no more.
- Classification. Data can be classified by sensitivity, and the controls follow from that.
- Access approval. We aim to route access through your request and approval process and to remove it at the end of the work.
- Retention and deletion. How long data is kept and how it is deleted can be agreed before the work begins.
- Confidentiality. We can sign a non-disclosure agreement before you share anything sensitive.
02 Data governance
Where is data governance covered?
When we build or modernize a data platform, governance is part of the design.
03 By design
How is privacy built into the architecture?
- Privacy-aware architecture and data minimization
- Role-based and attribute-based access control
- Encryption and key management
- Retention and deletion workflows
- Audit logging and traceability
04 This website
What does nexstella.com collect?
The privacy policy lists what this website collects and why. The cookie policy explains the consent choices.