Scope before documents
No source materials change hands until scope and confidentiality requirements are confirmed. In practice that means: the lane and batch are defined, the NDA or confidentiality terms are in place, and both sides know which document classes are included.
- Lane, batch size, and timeline agreed in writing
- NDA or confidentiality terms executed before exchange
- Document classes in scope listed explicitly
- Named recipients on both sides
Use the approved channel — never the contact form
Public web forms are for scoping conversations, not documents. The PEVO Wireless contact form deliberately accepts no file uploads. Once scope is set, a specific exchange channel is agreed — and everything moves through it, so there is one auditable trail instead of five.
- One agreed exchange channel per engagement
- No documents over public forms, personal accounts, or chat apps
- Access limited to the named reviewers
- Transfers acknowledged on receipt
Know your sensitivity classes
Not every file deserves the same handling. Classifying documents at exchange time prevents the worst failure mode: a restricted document circulating in a general folder.
- Financial: invoices, payment records, pricing — restricted to finance-relevant reviewers
- Legal: executed leases, title reports, legal review notes — restricted handling, flagged on receipt
- Personal: owner contact details, identity documents, signatures — restricted, never in shared notes
- Customer-confidential: work orders, requirements, templates — limited to the assigned team
- General working files: trackers, drafts, public-record research — standard handling
During the engagement
- Findings reference sources without duplicating sensitive content into new documents
- Restricted items flagged for restricted review rather than summarized broadly
- Conflicting source records escalated for human resolution, never silently merged
- Access reviewed when reviewers change
Retention and return
Agree at the start what happens to materials at the end: returned, deleted, or retained for a defined period for audit continuity. Write the expectation down in the engagement terms — retention decided at offboarding time is retention decided badly.
- Retention or return expectation stated in the engagement terms
- Deletion or return confirmed in writing at closeout
- Audit-relevant records identified before deletion
