Confidentiality Policy
Last updated: April 24, 2026
Confidentiality is fundamental to the trust between Blacksand Forensics and our clients. Whether you are a corporation facing a data breach, an individual dealing with a personal matter, or an attorney requiring forensic support, you deserve to know that your information will be protected. This policy explains our commitment to confidentiality, the measures we take to safeguard your information, and the limited circumstances under which disclosure may be required.
Our Commitment to Confidentiality
Blacksand Forensics is committed to maintaining the strictest confidentiality of all client information. This commitment includes:
- Never disclosing client information to third parties without explicit consent, except where legally required
- Storing all case materials, evidence, and communications using encryption and secure facilities
- Limiting access to case information to only those directly involved in providing services
- Properly destroying or returning all materials upon case completion, according to agreed retention schedules
- Executing non-disclosure agreements when requested by clients
Scope of Confidentiality
Our confidentiality commitment covers all information obtained through our professional relationship, including:
- Initial consultations and inquiries, whether or not they result in an engagement
- Case details, strategies, and findings
- Digital evidence, forensic images, and recovered data
- All written, verbal, and electronic communications
- Reports, analyses, and expert opinions
- The fact that you are a client, unless disclosure is authorized
Legal and Ethical Exceptions
While we maintain strict confidentiality, there are limited circumstances where we may be legally or ethically required to disclose information. We believe in transparency about these boundaries so you can make informed decisions about the information you share.
Mandatory Disclosure Circumstances
- Imminent Threat of Serious Harm
If we receive information indicating a clear, serious, and imminent threat of death or serious bodily harm to an identifiable person, Canadian law permits—and professional ethics require—that we take reasonable steps to protect the potential victim. This may include notifying law enforcement authorities. This exception applies only to serious, credible, and imminent threats—not to general concerns or past events. - Child Abuse or Neglect
Under Canadian law, all citizens have a duty to report suspected child abuse or neglect to child protection authorities. This duty overrides client confidentiality when there are reasonable grounds to suspect a child is in need of protection. - Court Orders and Subpoenas
If we receive a valid court order or subpoena compelling the production of records or testimony, we may be legally obligated to comply. Where possible and permitted, we will notify you before making any such disclosure and will limit disclosure to only what is legally required. - Other Legal Obligations
Other legal requirements under Canadian federal or provincial law may require disclosure in specific circumstances, such as anti-money laundering reporting requirements or other regulatory obligations.
In all cases involving potential disclosure, we will disclose only the minimum information necessary to fulfill our legal obligation and will take steps to protect your interests to the extent permitted by law.
How We Protect Your Information
We implement comprehensive security measures to protect client confidentiality:
- End-to-end encryption for all digital communications and stored data
- Secure, access-controlled facilities for evidence storage and examination
- Strict access controls and authentication for all systems containing client data
- Secure communication options including PGP-encrypted email for sensitive communications
- Audit trails documenting all access to case materials
Retention and Destruction
Upon completion of an engagement, client materials and evidence are retained only as long as necessary to fulfill our professional obligations or as required by law. Retention periods are discussed and agreed upon at the start of each engagement. When retention is no longer required, materials are securely destroyed using forensic-grade wiping procedures for digital data and secure shredding for physical documents. Clients may request return or destruction of materials at any time, subject to any legal holds or regulatory requirements.
Professional Standards
Our confidentiality practices are guided by:
- The Private Security and Investigative Services Act, 2005 (PSISA) Code of Conduct, which requires licensed investigators to treat all information received while working as confidential, except where disclosure is required by law
- The Personal Information Protection and Electronic Documents Act (PIPEDA) requirements for handling personal information
- Digital forensics industry standards and best practices
- Ethical guidelines governing cybersecurity professionals and expert witnesses
Your Rights
As a client of Blacksand Forensics, you have the right to:
- Be informed about how your information will be protected and any limitations on confidentiality before sharing sensitive information
- Access your own information and records related to your case
- Request destruction of your materials upon case completion, subject to legal requirements
- Ask questions about our confidentiality practices at any time
Questions About Confidentiality
If you have questions about this policy or our confidentiality practices, or if you wish to discuss specific confidentiality requirements for your case, please contact us at info@blacksandforensics.com.
