Operations and engineering
Placeholder Name †
With the service since 2021 †
Builds the constraints the confidentiality policy describes: the identity split at intake, metadata stripping, relayed messaging, logged and expiring access. Also owns the incident plan, including the decision to freeze records before anyone knows whether a concern is real.
Decides
✓System access controls and retention windows
✓Incident response, including freezing records
✓Which processors are used, subject to counsel
✓What the order page shows clients about a delay
Cannot
✕Grant themselves standing access to client records
✕Enable a direct channel between client and specialist
Security reports to the address on the legal hub; acknowledged within one working day.