Confidentiality is the condition of the work, not a feature of it.
How Wex & Counsel protects client work — described accurately, without certifications we have not earned or controls we have not implemented.
01 / Confidentiality
Every engagement is confidential by default.
- Confidentiality obligations are written into engagement terms and bind everyone who works on a matter.
- A confidentiality agreement is put in place before confidential matter material is exchanged — see Before an engagement.
- We do not name clients, matters or outcomes on this website or elsewhere without written permission.
02 / Access control
Access follows need, not convenience.
- Matter material is accessible only to the people assigned to the matter.
- Access is reviewed as teams change and withdrawn when a matter closes.
- Administrative access to systems is limited, individually attributable and logged.
03 / Matter segregation
One client’s work is never mixed with another’s.
- Materials for different clients and matters are held logically separate.
- Conflict considerations are addressed at intake, before material is received.
- Deliverables are prepared within the matter’s own workspace, not shared templates containing other clients’ content.
04 / Secure workflows
Work happens inside controlled environments.
- Matter material is exchanged through channels agreed with the client, not ad hoc attachments.
- Where clients operate their own environments, we work inside them.
- This website’s enquiry form is deliberately not a channel for confidential material.
05 / Data handling
Personal and sensitive data are handled to the client’s instructions and applicable law.
- Processing follows the engagement’s data-protection terms, including where work spans jurisdictions.
- Data is retained only as long as the engagement requires, then returned or destroyed as agreed.
- Our own website collects the minimum needed — see the Privacy Policy.
06 / Technology & vendor governance
Tools are chosen deliberately and reviewed periodically.
- Technology and service providers are assessed before use for security, confidentiality and data handling.
- The set of providers touching a matter can be disclosed to the client on request.
- Providers are reviewed periodically and replaced where they no longer meet our standard.
07 / Responsible AI
Technology assists controlled workflows; people remain accountable.
- Which tools may be used, for which tasks and with what data is agreed with the client — not assumed.
- Outputs that benefit from AI assistance are reviewed by legal professionals before delivery.
- Client material is not placed into public AI systems. Read more under Responsible AI.
08 / Workforce confidentiality
Everyone who touches client work is bound and trained.
- Confidentiality obligations apply to every team member and contractor.
- Training covers confidentiality, data handling and secure ways of working.
- Obligations survive the end of a person’s involvement with Wex & Counsel.
09 / Incident management
Defined steps, clear responsibility, prompt communication.
- Procedures exist to identify, contain and assess security incidents.
- Clients are notified where an incident affects their material or where law requires.
- Lessons are fed back into workflows and controls.
10 / Business continuity
Delivery continues through disruption.
- Arrangements are proportionate to the matters in hand and their deadlines.
- Work in progress is protected against loss of a device, a location or an individual.
- Continuity expectations can be written into the engagement.
11 / Client-specific requirements
Your standard is the starting point.
- Where a client has its own security policy, questionnaire or schedule, we review it at the outset.
- Requirements we meet are confirmed in writing; any we cannot meet are stated plainly before work begins.
- Information-security and AI-use schedules can form part of the engagement documentation.
12 / Before an engagement
Confidential material follows the agreement, not the other way round.
An initial enquiry through this website should not contain confidential, privileged or sensitive information. Once we have spoken, and where appropriate, we put a mutual confidentiality agreement in place and agree a secure channel before any matter material is exchanged. Engagement terms then govern how the work — and its information — is handled.
- 01Initial enquiry
- 02Suitability & conflict review
- 03Initial discussion
- 04Confidentiality agreement
- 05Engagement terms
- 06Secure channel
- 07Matter commences
13 / Certifications
Independent certifications will be published here when verified — not before.
We do not display certification marks we have not obtained or reference audits that have not taken place. Where a client requires evidence of specific controls, we provide it directly as part of the engagement.
Your requirements