How your documents are handled
This page sets out exactly what happens to a document from the moment you send it. If anything here is not enough for your firm's requirements, tell me and I will meet them or decline the work.
Himanshu Teli · Udaipur, Rajasthan, India · himanshuteli@hotmail.com · Last updated 13 September 2026
- You send it
- By a secure link from your own file-sharing system if you have one, or as an email attachment. Attachments are moved into the encrypted folder and deleted from my inbox the same day. I confirm receipt and record a SHA-256 fingerprint of each file, so we can both prove later that nothing changed.
- Storage
- An encrypted folder on my own laptop, in India. Unlocked only while I am working on your matter, locked otherwise. Never synced to cloud storage, never backed up, never on a shared drive or any device I do not control.
- Access
- Me alone. There are no employees, no contractors, no subcontractors. Two-factor authentication on every account involved.
- Processing
- See automated processing below.
- Delivery
- You receive a report in which every figure cites the source document and page.
- Destruction
- Thirty days after delivery by default, or on any schedule you specify, including immediately. I confirm in writing what was destroyed and when.
One outside service, named here rather than buried.
Scanned statements are transcribed using Anthropic's Claude, on my individual Claude Pro account, with the setting that lets Anthropic use conversations to improve its models switched off. With that setting off, Anthropic deletes the content from its systems within 30 days. Anthropic is based in the United States. It is the only third-party service that ever sees document content.
The working copies Claude's software keeps on my laptop are held inside your matter's encrypted folder and are deleted with it.
Digital PDFs with a text layer are read on my laptop and are never sent to any outside service.
If your client's position means no third-party service should touch the documents at all, say so and I will process them manually. It costs me time, not you money.
- I do not train, tune, benchmark or evaluate any model on your documents.
- I do not use your matter as a case study, sample or example without separate written permission.
- I do not retain anything beyond the agreed period.
- I do not act for any other party in the same matter, and will tell you immediately if I discover a conflict.
- I do not offer legal advice, expert opinion, or anything intended to be tendered as expert evidence.
You are notified within 24 hours of my becoming aware, with what happened, what data was involved, and what I have done. I will cooperate with whatever you or your client require, including notification to the ICO if that falls to you.
A summary of what the documents contain, with every figure traceable to a page. It is a working tool for you to verify and use — not advice, not an opinion, and not evidence I could speak to.
- Sole trader, not a limited company.
- Documents are processed in India, which has no UK data adequacy decision. If your firm requires a transfer agreement before sharing personal data, tell me before sending anything.
- Scanned pages are transcribed by a US provider on an individual plan, not an enterprise contract. If that does not meet your firm's requirements, ask for manual processing.
- No SOC 2 or ISO 27001 certification.
- Professional indemnity insurance is not yet in place.
I would rather you knew these now than discovered them later.