I think the preferred phrase is actually "I can neither confirm nor deny that." My very first startup hired an ex-NSA sysadmin, and no joke, he was very good a

I think the preferred phrase is actually "I can neither confirm nor deny that." My very first startup hired an ex-NSA sysadmin, and no joke, he was very good at deflecting jokey questions from a snarky 20 year-old me. He pointed out that "No comment" sounds slightly more like a denial to people, but "I can neither confirm nor deny that" seems more neutral and non-committal.