GessoBefore collection: establish rights and exclusions
We check ownership, client permissions, confidentiality restrictions and third-party materials with your company. Removing names does not create licensing rights. You can exclude systems, customers, projects, folders, code, formulas and other sensitive material.
We agree the systems, exclusions, permissions, processing providers, secure transfer and review process in writing before receiving project data. Tell us about restrictions on buyers or uses so those can be addressed in the proposed licensing terms.
During export: keep control of your accounts
Gesso guides your administrator through suitable exports. Your team enters its own credentials and keeps control of its accounts. We check the selected periods, records and attachments and arrange the project’s secure transfer. Buyers receive a prepared dataset under a license, with no access to your live systems.
During preparation: remove identifiers and preserve useful context
Preparation addresses names, contact details, account identifiers and other identifying information. It also checks attachments, images, filenames, metadata and combinations of details that could identify a person, customer or project. Credentials, access codes and security instructions stay out of the buyer package.
Consistent replacement labels can preserve relationships between records. A support conversation should remain linked to its resolution; a test result needs its units and conditions. If exclusions remove the context needed to understand a record, we reassess whether it belongs in the dataset.
De-identification needs more than deleting a name column. Technical know-how, confidential designs and trade secrets require deliberate exclusions even when no person is named. The project review addresses the selected material and intended uses; it is not a promise that removing identifiers eliminates every risk.
Before buyer access: complete the reviews
Independent privacy review and your review precede buyer access. Your company reviews prepared samples and deliveries against the selected records and exclusions. The written license sets the buyer’s permitted uses and any buyer or use restrictions.
After the first export: follow project retention
Gesso’s default retention for project data is 60 days from the first received export, or another period agreed in writing. That includes project exports, prepared working copies and identity-replacement mappings. The buyer’s permitted uses and retention are set separately in its license.
Website inquiries and calendar bookings are separate business records. The Privacy Notice explains the website information we collect and how it is used.
At the first call: describe the records
Bring system names, approximate history and known exclusions. No operational data upload is needed. Please keep private records, credentials and sensitive personal information out of the website form.
Book a qualification call or contact us with a question about your records.