Trust & Security
How we protect client information.
Our clients share sensitive questions with us, and our work depends on discretion. This page explains how we handle client information, protect our sources and secure our systems.
Confidentiality
Client engagements are confidential.
We treat every engagement as confidential: the client's identity, the subject of the work and what we find. Information a client shares with us is used for that client's assignment and handled under our agreement with them.
Our team and the specialists who work with us are held to the same standards of discretion.
Access
Information is limited to the people who need it.
Access to client information is limited to the people working on the matter. Our internal systems require individual accounts, and access to them is managed by role.
Sources
We protect the people who help us.
We do not disclose the identities of confidential sources. Reports describe the nature of a source where that helps a client weigh the information, without identifying the person.
Systems
How our systems are secured.
We use established providers for our infrastructure, and connections to our website and systems are encrypted. Our main providers are:
| Provider | What they do for us |
|---|---|
| Netlify | Hosts this website |
| Supabase | Database and storage for our internal systems, hosted in the United States, with data encrypted at rest |
| Resend | Sends confirmation and notification emails |
| Google Workspace | Email and documents |
Onsight, our intelligence platform, is under development and used internally. Clients do not currently have accounts on it.
Security reviews
Questionnaires and due diligence on us.
If your organization needs to review our security or data handling before an engagement, we can answer questionnaires and discuss our practices directly. Write to security@cascadeasia.com.
Reporting a concern
Tell us about a security issue.
If you believe you have found a security weakness in our website or systems, please write to security@cascadeasia.com with the details. Please do not access, change or delete data that is not yours while investigating.