Data security

How we protect your clients' data.

UK and US firms give us access to client ledgers and logins. These are the controls we use every day, set out plainly so you can use them in your own due diligence.

Access stays with you

We work inside your systems, on your terms.

We log in to the software you already use, such as Xero or QuickBooks Online, with user accounts you create, at the access level you choose. You can remove our access at any time.

  • NDA signed before any login or file is shared
  • A separate login for each of our team members
  • 2-step verification on our email and on client software
  • Data processing terms available for UK practices

Controls in our office.

The same rules apply to every member of the team, on every engagement.

Firm-owned computers only

Client work is done only on office computers, never on personal laptops.

No client files on phones or USB drives

Client data isn't kept on personal phones or pen drives.

2-step login

2-step verification on our email and on the client software we use.

Confidentiality agreements

Every team member signs a confidentiality undertaking. Our partners are also bound by the ICAI Code of Ethics.

Antivirus and firewall

Installed on all office computers.

Regular backups

Firm data is backed up regularly.

Restricted office access

Only our staff can enter the work area.

CA review

Every file is checked by a Chartered Accountant before it comes back to you.

Working together

What we ask of you.

  • Create a separate login for each of our team members, rather than sharing passwords
  • Give us only the access each task needs
  • Share documents through your own portal or apps such as Dext and Hubdoc, rather than by email
  • Remove our access when an engagement ends
Have a security questionnaire?Send it to md@mdvbca.com and we'll complete it as part of onboarding, along with our NDA.

Ready to see if we're a fit?

Book a 15-minute call with a partner. NDA first, no obligation.

WhatsApp us