Get an independent assessment of your privacy-critical systems.

We can review the design and implementation of systems that use anonymization or synthetic data technology, provide you with an audit report, and help you resolve any identified issues.

We can work on complex products deployed in bespoke production environments, work with engineering teams to address any technical issues in detail, and distill the findings in clear language, for executives, legal teams, or regulators.

Relevant experience

• Leading the anonymization consulting team at Google, which has to review and approve all new uses of anonymization technology at the company. Personally reviewing dozens of product launches, and defining company-wide policies.
• Performing adversarial assessments for multiple high-profile Google products that deployed ad hoc anonymization practices, leading to significant roadmap and strategy changes.
• Finding and disclosing multiple vulnerabilities in various open-source differential privacy libraries, and designing novel mitigations to provably mitigate this entire class of safety issues.