Book a Call
Security and compliance

Enterprise-grade governance in every engagement.

Our team works inside business-critical systems such as your CRM, data warehouse and code repositories. Every engagement is therefore governed by strict access controls, written approvals and rigorous data protection.

Request our NDA and DPAReview our controls

Vendor security questionnaires completed before onboarding

In every contract

  • Mutual NDA and data processing agreementSigned before any system access
  • Named accounts with multi-factor authenticationCredentials are never shared
  • Least-privilege accessRevoked when the engagement ends
  • Full ownership of code and IPTransferred to you at handover
Aligned data handling
GDPR
On every account
MFA
Code and IP ownership
100%
How we protect you

Standard controls on every engagement.

These controls apply by default, whatever the size of the engagement. No add-ons, no exceptions.

  • NDA and data agreement

    A mutual NDA and a data processing agreement are in place before we review your systems or customer data.

  • Named accounts with MFA

    Every team member works through an individual account protected by multi-factor authentication. Credentials are never shared.

  • Only the access we need

    We request only the permissions the current scope requires, and all access is revoked when the engagement ends.

  • Your data stays with you

    Your data remains in your environment. We never store customer records on local devices or use your data to train AI models.

  • GDPR-aligned work

    Every engagement follows GDPR data-handling standards, for clients in Europe and North America alike.

  • You own the IP

    All code, configurations, workflows and documentation transfer to your organization on completion of the final milestone.

Engagement lifecycle

Security from first access to final handover.

Governance is built into every stage, so your security and procurement teams know exactly what happens and when.

  1. 01Before access

    Agreements and onboarding

    • Mutual NDA and GDPR data processing agreement signed
    • Your vendor security questionnaire completed
    • Access scope agreed in writing
    • Named accounts provisioned with MFA
  2. 02During delivery

    Controlled, auditable work

    • Only the permissions the current scope requires
    • Work inside your own cloud accounts and repositories
    • No customer records stored on local devices
    • Your data is never used to train AI models
  3. 03At handover

    Clean exit, full ownership

    • All team access revoked
    • Code, configurations and workflows transferred to you
    • Complete documentation and runbooks delivered
    • Access review confirmed with your team
In writing

Contractual commitments, not promises.

Every commitment below is written into your services agreement and statement of work.

Available for your procurement review

  • Mutual NDA
  • GDPR data processing agreement
  • Completed security questionnaire
  • List of subprocessors
Mutual NDA and data processing agreement
Signed before any access to systems or data
Multi-factor authentication
On every named team account
Access
Only what the work needs, removed when it ends
Data handling
GDPR-aligned, in the EU and the US
AI and your data
Never used to train AI models
Code and IP
Yours at handover
FAQ

Security and procurement questions.

Will you sign our NDA, or do you provide one?

Either. We are happy to sign your NDA, or to provide our mutual NDA and a GDPR data processing agreement. Both are in place before we access any system or data.

Where is our data stored and processed?

In your environment. Wherever possible we work inside your own cloud accounts, CRM and repositories, and we never store customer records on local devices.

Do you use our data to train AI models?

No. Your data is never used to train AI models, and we select AI providers and settings that match your data protection requirements.

Can you complete our vendor security questionnaire?

Yes. Share your questionnaire or procurement requirements and we will complete them before onboarding, so your review does not delay the project.

What happens to our access and data when the engagement ends?

All team access is revoked, and all code, configurations, workflows and documentation transfer to your organization.

Need a vendor security review?

Share your security questionnaire or procurement requirements, and we will complete them before onboarding.

Send your questionnaire