The security of your company’s data is protected by the contract you sign with the consultancy provider. In addition to a non-disclosure agreement, which is typically a part of the contract, you can request data security reports and evidence (like incident logs or audit results) to be delivered to you on a regular basis.