Skip to main content
wetheapex
Book a call

Security & data handling

How we look after your data.

Automation work means touching your systems and your customers' information. Here is how we handle that, without the jargon.

  1. 01

    Access: only what the project needs

    • We ask for the minimum access required for the work, and prefer a dedicated user or service account over a shared login.
    • Access is limited to the people working on your project.
    • When the project ends, or whenever you ask, access is removed and we confirm it in writing.
  2. 02

    Confidentiality and NDAs

    • We are happy to sign your NDA, or provide ours, before you share anything sensitive.
    • We do not name clients, show their data or publish case studies without written permission.
  3. 03

    No training on your data

    • We do not use client data to train AI models.
    • Where a project uses an AI provider, we use business or API plans whose terms state that submitted data is not used for model training, and we tell you which provider is involved before work starts.
    • We send an AI provider only the data a task needs, and remove or mask personal details where the task allows it.
  4. 04

    Where your data lives

    • Wherever possible, automations run inside your own accounts (your Microsoft 365, your automation platform, your CRM), so the data stays where it already is.
    • Where we host a component for you, it is hosted in the UAE or the European Union. We agree the location with you first.
    • We keep working copies of client data only for as long as the project needs them, then delete them.
  5. 05

    Credentials

    • Passwords and API keys are never sent over email or chat. We use your secure sharing method, or a password manager.
    • Keys are stored in a password manager or in your own secrets vault, not in code, documents or spreadsheets.
    • Keys used during a build are rotated at handover.
  6. 06

    How we build

    • Every automation has error alerts and a fallback to a person, so failures are seen rather than silent.
    • We test with sample or masked data where practical before connecting to live systems.
    • You receive documentation that lists what each automation can access and what it does.
  7. 07

    If something goes wrong

    • If we become aware of an incident affecting your data, we will tell you promptly, explain what we know, and work with you on next steps and any legal notifications.

Plainly stated

What we do not claim.

wetheapex is a small agency. We do not currently hold formal security certifications such as ISO 27001 or SOC 2, and we will not suggest otherwise. If your organisation requires a certified vendor, a security questionnaire or specific contract terms, tell us early and we will be clear about what we can and cannot meet.

Questions about a specific requirement? Email support@wetheapex.com or read our Privacy Policy.

The free call

Find out what your team could stop doing by hand.

Book a free 30-minute call. We'll look at one process together and tell you honestly whether it is worth automating.

Book your free callEstimate your savings first
  1. First 10 minutesYou walk us through one process that eats your team's time.
  2. Next 10 minutesWe map the steps and point out what can run on its own.
  3. Last 10 minutesYou get a straight answer: automate it, fix it first, or leave it.

Free. No obligation. No sales deck.

Book your free 30-minute call