What you need to know
before you send us anything
Most of this page exists because your legal and information security teams will ask. It sets out where our material comes from and what that allows you to do with it, what happens to the information you give us, and how we hold and move sensitive material. The terms of any engagement are settled in the contract. This is what those terms will say.
Our sourcing does not
become your problem
Our outputs are records of events, not reproduced journalism. An entry carries what happened, where, when, who was involved, the classes of source behind it and a link to each. We do not reproduce article text, and nothing we send you contains material we did not have the right to use.
Every source we collect from carries a recorded legal basis and the date we last verified it. Where a publisher reserves its content, we stop collecting and remove what we hold. We keep that register because your counsel will eventually ask to see it.
What that means in practice. Briefs and assessments can be shared inside your organisation without restriction. Tell us before work begins if you need to quote them externally, in a regulatory submission, a filing or an industry forum, and we will confirm what the underlying source licences allow. That is a question we answer, not a permission we withhold.
Where work is delivered through an advisory partner, the same terms apply and the chain is set out in the engagement letter.
Your questions are as
sensitive as your answers
The set of questions a company asks about a country says a great deal about its exposure. We treat your asset list, your questions and your stated concerns as confidential material in their own right, not as project administration.
Your information is used for your engagement and nothing else. It does not inform work for another client, it is not aggregated into anything we publish, and it is not used to train any model.
Access inside EchoFrame is limited to the analysts assigned to your engagement, by role rather than by convention, and every access is logged. You can ask for that log.
Retention, storage location and deletion are agreed before work begins and written into the contract. At the end of an engagement we delete on request and confirm in writing what was deleted and what, if anything, we are required to retain and why.
Sensitive material moves on
your terms, not by email
Before anything confidential is exchanged we agree the channel. We do not ask you to send sensitive material by ordinary email and we will not send it to you that way.
Material is encrypted in transit and at rest. Access requires multi-factor authentication. Administrative access is separated from analyst access and both are logged.
We can work inside your own environment where you prefer it, using a data room or a channel your security team has already approved, rather than asking you to adopt ours.
We will complete your supplier security assessment and answer a standard questionnaire. If you need a named point of contact for information security matters during an engagement, you get one.
What we do not send you,
and why that protects you too
Some of our material comes from people reporting from places where being identified as a source carries real consequences. Identities of reporters and their sources remain with the newsroom they work for. We do not receive them.
That means you never hold identifying information about a person on the ground, and you cannot be asked to produce it. Where a record is marked as source-protecting, it is never shown at a level of location detail that could identify who filed it. That constraint is enforced in the system rather than left to an analyst to remember.
If a record cannot be shown to you in full for that reason, we tell you that it exists and why it is restricted, rather than leaving it out silently.
Every assessment says
what would change it
An assessment states the assumptions it rests on, the alternatives it considered, and the observation that would change the conclusion. Where a judgement depends on a single source, it says so. Where sources disagree, both sides are shown rather than reconciled into a balanced paragraph.
Where we give a probability, it carries the evidence that moved it and the date it will be settled. When that date arrives we record what actually happened, whether we were right or wrong.
If you believe something in a deliverable is wrong, raise it with the analyst on your engagement. We correct it, record the correction and say what changed. For anything published on this website, send the page, the claim and the evidence to contact@echoframe.co.
Full terms are agreed in the engagement letter. Our privacy notice explains how this website handles enquiries and service records.