Trust and information handling

Match the environment to the work.

Begin an evaluation with public or appropriately sanitized material. Before using company or restricted information, confirm the applicable environment, access, and data-handling terms.

Know what evidence you can inspect and what information you can use.

Source visibility and a named decision owner help your team review the work. Deployment and information-handling requirements need their own explicit review.

Deployment and data scope

Confirm the specific environment and information types authorized for your use case.

Access and use

Review role access, data use, model providers, retention, deletion, and the treatment of customer material.

Evidence and accountability

Check sources, assumptions, unresolved gaps, and who approves the result before it is used externally.

Current documentation

Request the current scope and supporting documentation for any security, assessment, or authorization claim relevant to the work.

Use the first trial to assess the work.

Public customer records and a sanitized pursuit are useful starting points. If a workflow requires additional access or a different environment, define that requirement before supplying the material.