Legal - Data Processing & Security
Last updated: January 13, 2026.
This statement provides a high-level overview of how Emp42 approaches data processing and security. Specific client engagements may include additional contractual controls.
Principles
We aim to collect the minimum data needed, restrict access, and operate with reasonable security controls appropriate to the context.
- Data minimization. We only request and retain data necessary for the agreed purpose.
- Access control. Access is limited to authorized individuals on a need-to-know basis.
- Confidentiality. Client information is handled confidentially and protected by contractual terms where applicable.
- Security measures. We use reasonable technical and organizational measures to protect data against unauthorized access, loss, or misuse.
Contact
For security or data processing questions, contact legal@emp42.ai.