Confidentiality

Scope of Confidentiality

Our organisation undertakes to keep confidential all trade secrets, technical materials, source code (if provided), test data, undisclosed vulnerability information, and report contents learned during the commissioning process. Exceptions apply where laws or regulations require otherwise, where administrative or judicial authorities request disclosure in accordance with the law, or where the client has given written consent to disclosure.

Measures

• Need‑to‑know basis: Only authorised personnel have access to commissioned materials.
• Storage and transmission: Production‑environment inquiries and test materials are not copied to development databases.
• Subcontracting: If subcontracting occurs, our organisation remains liable to the client and imposes equivalent confidentiality obligations on the subcontractor (specific terms are governed by the contract).
• Report verification: By default, the full name of the client is not disclosed in external verification responses.

Duration

The confidentiality obligation remains in effect after the commission ends. The specific duration is set forth in the contract and quality system documents; where laws provide otherwise, such legal provisions prevail.

Exceptions

Publicly required accreditation information (e.g., certificate status, scope of capability schedules) does not constitute client trade secrets and is not subject to the above confidentiality obligations.