Security and confidentiality.
What happens to your draft, who sees it, and when it is deleted. Only what is true today.
From first call to deletion.
- 1
Conflicts check
Within one working day.
- 2
NDA
Signed before any draft.
- 3
Insider record
Insider list under UK MAR.
- 4
Secure transfer
Method agreed in writing.
- 5
Review
Assigned people only.
- 6
Delivery
To the CFO and the audit committee chair together.
- 7
Deletion
30 days after delivery.
What we commit to now.
Confidentiality before any draft
An NDA, and our reviewer placed on your insider list under Article 18 of UK MAR, before any draft is shared.
No drafts through the website or email
The site forms ask for no documents, and the enquiry forms warn against sending drafts. Anything sent before an NDA is not received in confidence and may be deleted.
Who sees your documents
Every report is reviewed by Sandeep Choudhary before release, and by the professionals assigned to your engagement. Access is limited to the people assigned to your engagement.
AI processing
Documents are processed by our AI model provider, Anthropic, under enterprise terms that do not allow training on customer data. The full processor list is below.
Where data sits
Enquiries made through this website are stored in Mumbai, India, and transferred under the UK International Data Transfer Agreement or the UK Addendum. Where engagement documents are stored and processed is agreed in the engagement letter before anything is shared. If you need the review done in the UK, say so at scoping.
Retention and deletion
Review documents you supply are deleted 30 days after delivery of the report, or earlier on request, unless the law requires us to keep them. The final report, its list of findings and its fingerprint are kept so that the report can be verified. Contract records are kept for 8 years. Insider-list entries are kept for 5 years, as UK MAR requires.
Protection
Encryption in storage and in transfer, access limited to authorised people using multi-factor authentication, and review documents kept apart for each client, as our privacy notice commits.
If something goes wrong
We tell affected people without delay, in plain language, and keep a record of every breach and the steps taken, as our privacy notice sets out.
Proof the report was not altered
Each released report has a recorded SHA-256 fingerprint; your browser checks a copy on the verify page without uploading it.
How a draft reaches us
Through the secure transfer method agreed in writing for each engagement, before any draft is shared. Never through this website or by email.
Who processes data for us.
| Role | Provider | Where |
|---|---|---|
| Website hosting | Vercel | USA, with a global edge network |
| Website database (enquiries and requests) | Upstash Redis | India (Mumbai region) |
| AI model provider | Anthropic | Under enterprise terms that do not allow training on customer data |
| Zoho Mail | India |
What is not in place yet. We say so.
Third-party security certification
We do not hold SOC 2, ISO 27001 or any other third-party security certification today, and we do not claim one.
Running inside your own cloud
Pramanex Enterprise, where the draft never leaves your account, is in development and not yet available.
Professional indemnity insurance
Professional indemnity cover for UK engagements is put in place before the first paid UK engagement. Ask us for the current position when you scope a review.
This page summarises our commitments. The privacy notice and, for an engagement, the signed engagement letter and NDA govern. Not an audit, review, certification or assurance opinion, and not legal advice. Pramanex is not a registered statutory auditor.
Every report is reviewed by Sandeep Choudhary before release.
Sandeep Choudhary, Founder, Pramanex. More than 17 years across treasury, record-to-report, finance centres of excellence for global groups, and finance transformation.
Book a 20-minute call.
Tell us your year end and your timetable. We tell you what we would read, what it would cost and what we need from you. No documents, no obligation.
Your annual report will be in draft before the year-end audit.
Have it read before it is published.
Under NDA, with our reviewer on your insider list under UK MAR.