Our core principles
- Use only data needed for the task.
- Anonymise or pseudonymise where appropriate.
- Choose an AI environment appropriate to the data class.
- Limit access and define human review.
- Block applications whose risk cannot be appropriately controlled.
An NBW scan is business and implementation focused and does not replace legal, DPO, privacy or security advice where specialist review is required.