Build reviews stay inside the project team.

CloudStell treats staging access as a controlled collaboration channel. These obligations work alongside any signed NDA or project agreement.

Discretion

Do not disclose or publish project material without written permission.

Careful handling

Use approved accounts, devices, storage, and transfer methods.

Least access

Share only with people who need the information to perform project work.

01

What is confidential?

Confidential information includes non-public information disclosed by or for a client or CloudStell, whether labelled or not, that a reasonable person would understand to be private. It includes:

02

How information may be used

Use confidential information only to evaluate, develop, test, support, or deliver the specific project for which it was shared. You may not sell, copy, train a model on, reverse engineer, publicly display, or use it for a competing purpose without written authorisation.

Internal project review by approved participantsSecurity and integration testing within scope

Operational safeguards

Handle staging data as if it were production-sensitive.

Use synthetic or minimised data wherever possible. If real personal or regulated data is necessary, obtain approval first and follow the project’s documented security instructions.

01

Access control

Keep passcodes, tokens, and invitation links private. Remove access when a participant leaves the project.

02

Secure transfer

Use approved encrypted channels and do not place confidential files in public repositories or chat rooms.

03

Incident notice

Report loss, unauthorised access, mistaken disclosure, or suspected compromise promptly to the project lead.

04

Retention

Return or delete confidential material when requested, subject to lawful retention and backup requirements.

Information not covered

Confidentiality obligations do not apply to information that you can demonstrate was already public without breach, was lawfully known before disclosure, was independently developed without using protected information, or was received lawfully from a third party without a duty of confidence. If disclosure is required by law, disclose only what is required and, where legally permitted, give prompt notice so protective steps can be considered.