Trust
Discretion is part of the engagement model.
DEVIS engagements involve commercially sensitive transaction material, internal analysis and confidential counterparty information. Information handling is governed as part of the engagement, not treated as an administrative afterthought.
Information Handling
The commitments that govern every engagement.
From the first document shared to the final report, client information is handled under defined terms and controlled access.
- 01
Confidential engagements
The existence, subject matter and scope of an engagement are handled under applicable confidentiality terms.
- 02
Need-to-know access
Engagement materials and deliverables are controlled by role, permission and operational requirement.
- 03
Purpose-bound use
Client information is used for the defined engagement. It is not sold, traded or shared for another client’s benefit.
- 04
Lawful sourcing
Client-provided, public, official, registry-based and other lawfully accessible information. No pretexting or unlawful-access methods.
- 05
Controlled delivery
Client data is isolated by firm, administrative access requires multi-factor authentication, and deliverables are retrieved through short-lived secure links.
- 06
Documented terms
Retention, permitted use, confidentiality, access and governing law are addressed through the contractual framework.
Sources and Scope
Evidence selected for relevance, not volume.
Source selection depends on the jurisdiction, subject matter, transaction context and agreed engagement scope.
Corporate and ownership
Company, beneficial ownership, director and insolvency registers.
Regulatory and enforcement
Licensing, sanctions, debarment, enforcement and official regulatory records.
Courts and public records
Litigation, court, property, insolvency and other public-record sources.
Jurisdictional information
Public procurement, political exposure, lobbying and country-risk information.
Digital and historical record
Domain, digital-footprint, archived web and corroborative records.
Client-provided material
Transaction documents, data room materials and information supplied for the engagement.
- Source availability, accessibility, reliability and coverage vary by jurisdiction and subject, and are confirmed during scoping.
- Absence of an accessible record is not proof that an event, relationship or fact does not exist.
- Reports identify material source limitations, incomplete information and inconclusive evidence where relevant.
Client Questions
Five questions institutional teams ask.
Evidence, confidentiality, human review, delivery and assurance, addressed directly.
What information does DEVIS use, and how is provenance maintained?
DEVIS uses client-provided, public, official, registry-based and other lawfully accessible information relevant to the agreed engagement. Material findings retain source transparency, and coverage by jurisdiction is confirmed during scoping.
How is confidential client and transaction information handled?
Client and transaction information is handled under applicable confidentiality terms, with access controlled by role and permission, and used only for the defined engagement. The full commitments are set out under Information handling, above.
How is AI used, and is the output reviewed?
Specialised analytical systems perform structured evidence checks and synthesis across the five intelligence lenses. Outputs pass through human quality control before client delivery. Ask DEVIS lets authorised users interrogate the completed intelligence, evidence and assumptions within controlled boundaries.
What does an engagement require, take and deliver?
At scoping, the client identifies the decision, relevant parties, jurisdictions, available material and priority questions. Typical turnaround is 3–5 business days, depending on scope. Delivery includes a human-reviewed report, linked evidence, exposure and escalation points, open questions and controlled access to Ask DEVIS.
Is DEVIS OS SOC 2, ISO/IEC 27001 and GDPR compliant?
Not yet. DEVIS is preparing for SOC 2 assurance and ISO/IEC 27001 certification, while implementing privacy and data-governance measures intended to support applicable GDPR requirements. Its processes are being designed around recognised principles for security, availability, processing integrity, confidentiality and privacy. DEVIS does not currently claim SOC 2 attestation, ISO/IEC 27001 certification or verified GDPR compliance.
Status at 14 September 2026: formal assurance and compliance work remains in progress.
Professional Boundaries
Where DEVIS stops and your advisers begin.
Intelligence and decision support, never a substitute for professional judgement.
DEVIS provides
- Intelligence and decision support for the decision in front of you
- Evidence-linked findings, their status and what they may affect
- Questions for your advisers, management or specialist review
DEVIS does not provide
- Legal, tax, accounting, audit, investment, credit, lending, valuation, regulatory or other regulated advice
- A determination of whether a client should invest, lend, acquire, sell, proceed or decline
Conclusions and decisions remain with the client and its advisers.
Private Working Session
Discuss your matter in confidence.
It begins with a confidential 20-minute introduction. Bring a live company, transaction or investment-screening question, and we will set out how your information would be handled.
Request a SessionNo obligation. Engagement structure and pricing are set out in the session.