Confidentiality and handling

Lee Tarusov, trading as Tarusov Transcription, is registered with the Information Commissioner’s Office. Registration reference: ZC237658.

Before work starts, you set the scope, transfer method, authorised recipients, retention period and any non-disclosure agreement. You then send material by a named-recipient Microsoft 365 link or through your own secure system.

Never send recordings or case material through the public forms or as ordinary email attachments. You remain responsible for your authority to provide the material, arrange meeting access and name the permitted recipients.

One transcriber has human access, unless you agree otherwise in writing, and files stay in access-controlled systems. Accounts that hold your material use two-factor sign-in, devices are fully encrypted, and the work is done in a private space with headphones.

Your material does not go into AI or automated-transcription systems without your explicit written authorisation.

Records go only to the recipients you named. Working files leave active storage at the agreed point; temporary provider recovery copies may remain until they are deleted automatically.

Controller-processor terms are built into every engagement, so you do not need to draft a separate data processing agreement.