Standards

Governance & compliance

Governance is the foundation trust is built on. The standards below apply to every engagement, in every jurisdiction we work in.

Data Privacy & Cross-Border GDPR Architecture

Every mandate spanning UK and EU jurisdictions is held to both regimes' data protection standards.

Dual-regime compliance: Corporate data, personal identifiable information and health or longevity metrics are handled to both EU GDPR and UK GDPR standards.
Secure transfer protocols: Cross-border data flows are governed by standard processing agreements and encrypted transfer protocols.

Regulatory alignment is a prerequisite, not a formality, for any longevity, medical wellness, therapeutics or precision health mandate.

Regulatory governance: We confirm client technologies, clinical facilities and commercial frameworks hold, or are actively pursuing, pre-clearance from the relevant authority: the MHRA in the United Kingdom, the ANSM in France, and Swissmedic with the cantonal authorities in Switzerland.
Classification before claims: Where a mandate involves devices or digital health, classification under the EU and UK medical device regimes — including where a technology is reclassified by its function — is mapped alongside evidence requirements and timelines before any engagement is accepted.
AI obligations alongside medical rules: Where a mandate involves predictive health AI, obligations under the EU AI Act — human oversight, bias mitigation, transparency and data quality standards — are mapped alongside medical device obligations, before any engagement is accepted.

Financial governance is structured to protect both parties across every jurisdiction in which we operate.

Reverse-charge mechanism: Cross-border invoicing to international clients is issued under the standard VAT reverse-charge mechanism, allowing local tax self-assessment without secondary registration.

Mandates are accepted selectively, and discretion governs every relationship.

Non-disclosure: Every engagement is governed by mutual non-disclosure. Client identities, materials and commercial terms are never shared without written consent.
Conflicts & exclusivity: Before any mandate is accepted, competing and adjacent interests are reviewed. Where a conflict of interest exists, the mandate is declined.

Further detail on our governance framework is shared privately with prospective clients on request.