Robust infrastructure, NDAs, and privacy-first practices