PrivacyStudios operates as a fully remote organization. This policy defines how remote work functions at PrivacyStudios, what it means for team members in practice, and the professional standards expected when working with client data, AI tools, and confidential information.
This policy applies to all PrivacyStudios team members, contractors, and advisors engaged in work on behalf of the firm.
Remote work at PrivacyStudios is not an exception to normal operations — it is the normal operation. There is no central office. All work is performed remotely by default.
Being remote-first means that our organizational structure, communication practices, and client delivery model are all designed around distributed work — not adapted from an office model.
Team members choose where they work. PrivacyStudios does not mandate a home office, co-working space, or specific geography. What matters is the quality and security of the working environment, not its location.
Remote work at PrivacyStudios is built on trust. Team members manage their own schedules with one clear expectation: responsiveness and delivery take priority over fixed hours.
In a remote environment, communication must be intentional. The absence of a shared physical space means that clarity, documentation, and responsiveness carry more weight.
Given the nature of PrivacyStudios work — advising organizations on AI governance, privacy compliance, and data handling — security is not a formality. It is a professional obligation.
Secure internet connection: Use a private, password-protected network. Do not conduct client work over public or shared Wi-Fi without a VPN.
VPN: Required when accessing client files, internal systems, or any sensitive material on unsecured networks.
Device security: All devices used for PrivacyStudios work must have full-disk encryption enabled, current OS updates applied, and strong authentication (password + MFA) active.
Screen lock: Devices must auto-lock within 5 minutes of inactivity.
Antivirus and endpoint protection: Required on all devices used for firm work.
Only approved tools may be used for client work, internal communication, and document management. Use of unauthorized platforms — particularly for AI assistance or document processing — is prohibited.
Given that PrivacyStudios advises clients on AI governance, team members are expected to model the same discipline internally. Any AI tool used in client work must be documented, assessed for data exposure risk, and approved by the principal.
PrivacyStudios actively uses AI tools in its work. This is intentional and aligned with our positioning. It also creates obligations.
Our credibility with clients depends in part on the discipline with which we handle their information. What we advise clients to do, we must do ourselves.
While PrivacyStudios does not impose fixed hours, team members are expected to establish and communicate predictable availability windows that overlap with client and team needs.
PrivacyStudios operates at the intersection of law, technology, and compliance. The professional standards applicable to this work do not change because the work is performed remotely.
Team members are responsible for providing their own working equipment unless otherwise agreed in their engagement terms.
This policy will be reviewed and updated as PrivacyStudios evolves. Team members will be notified of material changes.
Continued engagement with PrivacyStudios following notification of a policy update constitutes acceptance of the revised terms.
Questions about this policy should be directed to the principal.