Due diligence necessarily involves the handling of personal and professional information. Cairn conducts every engagement in full compliance with applicable privacy, data protection, and securities regulations.

Material Non-Public Information. Our researchers begin every interview with a statement that material and non-public information will not be discussed. If a source begins to disclose information that may constitute MNPI, the researcher will stop the conversation immediately. A careful post-interview review is also conducted to ensure no non-public information is present.

Data Privacy and Protection. We handle all personal data in accordance with applicable privacy regulations. Source identities, interview content, and client engagement details are stored securely, shared only with authorized personnel, and retained only for the duration required by the engagement. We do not repurpose research data across engagements or clients.

Informed Consent. Every source interviewed by Cairn is informed at the outset that the conversation is being conducted for a confidential research project and that it will be recorded. Participation is voluntary, and sources may decline or withdraw at any time. Consent is documented for every interview.

Secure Handling. Research materials — including recordings, transcripts, notes, and draft reports — are stored in encrypted environments and transmitted through secure channels. Access is limited to the research team and the commissioning client. Upon engagement completion, materials are retained per our data retention policy and securely disposed of thereafter.