Your Brand. Your Clients. Your Data. In Writing, Before Any Access.
Everything an agency needs to know about how we protect client relationships, credentials and campaign data, and what happens to all of it when an engagement ends.
- NDA before any access
- 0 client contact
- 2FA on every team account
- 48 hrs access revoked on exit
- DPA available for UK/EU
- Confidentiality
What the NDA Covers
Your client list
Never disclosed, never used in our marketing, never contacted.
Your strategies and pricing
Blueprints, margins and quotes stay between us.
Your relationships
We work only through your POC. On calls we join as your team.
Mutual
It binds us both. Your template or ours, signed before any brief is shared.
- Access & credentials
How We Handle Logins and Data
- Agency-owned by default
Access model
Acknowledge
GA4, Search Console, GBP and CMS are linked to an email you control. Revoke us any time.
Credential vault
Shared via password manager, never chat or email.
Role-based access
Only the specialists on your account can see its data.
2FA everywhere
Enforced on every team account.
- Where it lives, who sees it
Data handling
Project workspace
Briefs, logs and reports in Basecamp or your tool, scoped per agency.
Office-based team
Full-time staff on company-managed devices in one office in Mohali, India.
DPA on request
For agencies with UK or EU clients. ISO 27001 / SOC 2 status if any
DPA on request
For agencies with UK or EU clients.
Deletion on exit
Briefs and access archived or deleted within 48 hours, confirmed in writing, after your handover pack.
- If something goes wrong
Incident Handling
- 01
Acknowledge
We acknowledge and start looking into it. You'll hear from your POC.
- 02
Contain
We assess the impact, revoke or rotate access if needed, and identify affected accounts.
- 03
Report
You receive a clear summary of the cause, scope, what was affected, and what we're changing.
- 04
Prevent
We implement fixes, update processes and share the changes with you to prevent it from happening again.
- Common questions
Security and Confidentiality FAQs
Still have a question?
We're here to help. Get in touch and we'll get back to you quickly.
Can we use our own NDA?
Yes. Most agencies do. We sign yours or send ours; either way before any access.
Do you ever contact our clients?
Never, unless you authorise it in writing. If a client reaches us by mistake, we redirect them to you.
Do publishers or tools see our agency name?
No. Outreach never names your agency or your client’s relationship to you.
Who at VG can see our client data?
Only the Account Manager and specialists assigned to your account.
What happens to data when we leave?
Can you sign a DPA?
Yes, for UK/EU clients, on request.
Want the NDA
Before the call?
Ask and we’ll send it today. many agencies sign before the first conversations; that is fine with us.
