Trust and transparency

Security approach

Last updated 18 August 2026

Caldriva is an early-stage service. We take a careful, limited-scope approach to every evaluation and do not present controls that have not yet been independently verified.

Start with minimum access

A pilot begins with the smallest practical dataset and the fewest permissions required. Synthetic or redacted documents are preferred while testing suitability.

Approved connections only

System integrations require the customer's authorisation and the relevant software provider's approved access method. We do not ask customers to share personal passwords or attempt to bypass system restrictions.

Human review

Extracted information is presented for review before it is treated as ready for the next step. Automation does not remove the need for appropriate professional judgement.

Data handling

Before real client information is processed, the parties agree what data is involved, where it may be handled, who can access it and when it will be deleted. Further safeguards can then be documented for the specific workflow.

Report a concern

To report a security or data concern, email cameron@caldriva.co.uk with enough detail for the issue to be investigated. Please do not include unnecessary sensitive information.