Begin with a summary
Explain the type of information and why it is relevant. A redacted example may be enough for early scoping. Confirm your authority to disclose and verify the recipient. Avoid secrets in email subject lines, public issue trackers, or screenshots.
Leave secrets out of first contact
Do not send passwords, session tokens, private keys, recovery codes, identity documents, payment details, customer datasets, or suspicious executable files. Complete logs may contain sensitive information even when they look routine. Check metadata and related records when redacting material.
Agree the arrangements
Discuss approved channels, access permissions, expiry, storage, retention, and deletion for a project. The appropriate method depends on sensitivity and the agreed task. No file upload endpoint or client portal is configured on this website. Contact forms prepare email drafts on the visitor’s device.
After the work
Agree who keeps records and for how long, and how access is removed. If you accidentally disclose a secret, follow your internal revocation or rotation procedure and inform the responsible owner. Do not repeat the secret in a follow-up message.