ExpertMatcher security for confidential briefs and engagements
A brief often describes something a company has not told anyone yet: a fundraise, a departure, a compliance gap, a product that is late. ExpertMatcher security is built around that fact. Every expert is verified, details stay locked until an NDA is signed, and access to your data is limited to the people who need it.
Every expert is verified before matching
No profile enters matching until verification is complete. Companies see what was checked on every profile, item by item.
Read how verification works for the supply side on become an expert consultant.
- Identity check with a government issued ID and a live selfie match
- Work history checked against public records and references
- References contacted directly with a structured questionnaire
- Certifications and licenses checked with the issuing body where a lookup exists
An NDA before any brief detail is shared
Matched experts first see only the role, format, budget band and timeline of a brief. The full description, your company name and any attached files are shared only after the expert signs the NDA inside the platform. Each signature is stored with a timestamp against the brief, and you can revoke access to a brief at any time.
Confidentiality across the engagement
- Shortlists, comments and approvals are visible only to seats in your workspace
- Call notes and project files are shared only between your workspace and the engaged expert
- Experts never see other experts on your shortlist
- Briefs are never published, indexed or shown to companies outside your workspace
- Your brief text is used to build your match brief and is not used to train public AI models
Encryption in transit and at rest
All traffic to expertmatcher.com uses TLS. Data at rest, including briefs, profiles, contracts and files, is encrypted on storage managed by our hosting provider. Passwords are stored only as salted hashes, and sign in codes expire after a short time.
Access control, roles and SSO
- Every seat signs in with its own account, and workspace owners add and remove seats
- Custom roles (owner, admin, member, viewer) for Enterprise workspaces
- Approvals before a call is booked or a SOW is signed (Scale and Enterprise)
- Single sign on with SAML for Enterprise workspaces, so access follows your identity provider
- Our own staff access customer data only to resolve a support request or a dispute, and every such access is logged
Audit log for Enterprise
Enterprise workspaces include an audit log that records sign ins, brief changes, NDA signatures, shortlist actions, bookings, contract signatures and payment approvals, with the seat, time and action for each entry. Admins can export it for internal reviews.
Payments through a PCI DSS compliant processor
Card and ACH payments run through a PCI DSS compliant payment processor. ExpertMatcher never stores full card numbers or bank credentials on its own systems. Invoices, payouts and 1099 records are kept for the periods required by tax rules.
Retention and deletion on request
We keep account and engagement data for as long as your account is active and for the periods required by law for contracts, invoices and tax records. You can delete a brief from your workspace at any time. To delete your account and personal data, write to [email protected] from the account email, and we confirm the deletion once it is done. Details are in the privacy policy.
Security review pack for Enterprise
Enterprise admins download a security review pack from inside the account. It answers common vendor questionnaire topics: data flows, encryption, access control, retention, subprocessors by category and incident response. Plans and limits are on ExpertMatcher pricing.
Responsible disclosure
If you believe you found a security issue in ExpertMatcher, write to [email protected] with the steps to reproduce it. Please do not access data that is not yours and give us reasonable time to fix the issue before sharing it. We reply within one business day and keep you informed until the issue is resolved.