Website and engagement terms
The basis on which we publish this website and enter advisory engagements.
Information on this website
Content here is general information, not advice for your specific situation. Scope, deliverables and fees for any engagement are agreed in writing before work begins.
Deliverables and intellectual property
The written engagement scope defines the deliverables and how they may be used. Ownership of client material, Nincol methods and engagement outputs is governed by that engagement documentation rather than by this website page.
Pricing and scope changes
Fees are quoted per engagement on request. The exact deliverables, meetings, exclusions, fee and any later scope change are governed by the written engagement scope.
Advisory engagements
Our deliverables are recommendations based on the information available to us during the engagement. Decisions about whether to act on them remain yours. Where a question requires legal, regulatory or accounting interpretation, we will say so and recommend qualified counsel.
Security engagements
We perform no intrusive security testing without written authorisation identifying the asset owner, the systems in scope, the permitted techniques and the testing window. A security assessment reduces risk; it cannot certify that a system is free of vulnerabilities.
Confidentiality
We treat what you share as confidential and use it only to deliver the engagement. Case studies are published only with permission, and anonymised unless you agree otherwise.