Keep privacy risk in check

Get an independent assessment of your privacy-critical systems.

We can review the design, implementation, or output of systems that use anonymization or synthetic data technology, to check their real-world robustness against privacy failures. We work with you to define a crisp threat model, provide you with a comprehensive audit report, and help you resolve any identified issues.

We can work on complex products deployed in bespoke production environments, work with engineering teams to address any technical issues in detail, and distill the findings in clear language, for executives, legal teams, or regulators.

Relevant experience

• Leading the anonymization consulting team at Google, which has to review and approve all new uses of anonymization technology at the company. Personally reviewing dozens of product launches, and defining company-wide policies.
• Performing adversarial assessments for multiple high-profile products that used ad hoc anonymization practices, leading to significant roadmap and strategy changes.
• Finding and disclosing multiple vulnerabilities in various open-source differential privacy libraries, and designing novel mitigations to provably mitigate this entire class of safety issues.