Your data remains yours.
Client data is used only to deliver the work we agree to. Palanca does not sell it or use it to train models. Ownership does not transfer to Palanca.
Data-handling principles
Data, handled with care.
Palanca works close to the way a business operates. That can involve sensitive documents, communications, and systems. Access should therefore be narrow, deliberate, and reviewable.
These are operating principles, not a representation that Palanca holds a formal security or compliance certification.
Last updated / August 7, 2026Access is agreed before it is granted.
We document the systems, data paths, and outside tools needed for the engagement before connecting them. The default is the minimum access necessary for one bounded workflow.
Where practical, credentials and final authority remain inside the client’s existing systems.
Sensitive actions stay human-led.
Money movement, client communication, and actions taken in your name remain approval-gated unless you explicitly authorize a narrower operating rule. Actions are designed to be logged and reviewable.
Outside tools are disclosed.
Some work may use third-party hosting, software, or model providers. The proposed tools, purpose, and cost are disclosed before use. Those providers process data under their own terms, which we review for fit rather than treating every tool as interchangeable.
Testing comes before launch.
Systems are tested on approved historical or representative cases before they touch live work. The engagement defines what is monitored, what requires approval, and what happens when a check fails.
Retention follows the engagement.
Retention, return, and deletion expectations are agreed for the specific work. Palanca does not make a blanket deletion promise that a chosen provider or required recordkeeping process cannot support.
Some work needs a different operator.
Palanca does not independently promise HIPAA or SOC 2 compliance, contractual uptime, regulated advice, or large multi-team security ownership. If a workflow requires those assurances, I will say so before taking the work and help identify the right path.
Ask a data-handling question