This is usually the first question we’re asked, and it deserves a proper answer.

The structure does most of the work. Your resource works within your own systems — your case management platform, CRM, email and document storage — accessed remotely and under your direction. DUX does not receive, hold or process your client data. Functionally, the arrangement is the same as having a remote member of staff, because that is effectively what it is.

You control access. You decide what systems the resource can reach, at what level, and you can revoke that access instantly at any time. Nothing sits outside your control.

The people are vetted. Before anyone starts, we carry out criminal record checks, credit checks and reference verification. You see the results.

Confidentiality is contractual. Every resource signs written confidentiality and non-disclosure obligations covering your information and that of your own clients. They are contractually prohibited from storing client information on personal computers, phones or storage devices, and must return or delete anything held on termination.

Data protection. We comply with UK GDPR and the Data Protection Act 2018, and with South Africa’s Protection of Personal Information Act (POPIA), which is closely modelled on GDPR and provides comparable safeguards.

For regulated firms. If you are subject to SRA, FCA or professional body requirements around outsourcing, we will support your compliance and audit processes and can provide documentation for your files. Many of our clients need to evidence oversight of outsourced work, and the model is built to make that straightforward.