Company · Security and delivery
Your work stays yours, and a project starts the same way every time.
What we protect, what we promise, and what happens between the first call and handover. Written for the team that has to approve a vendor.
How a project starts
Yoursthe code and the IP, on paid work
NDAbefore we see anything sensitive
Namedeveryone on your project, before you sign
What we protect
Six things a vendor review asks about.
Plain statements, not a certificate wall.
Ownership
What is yours.
- On paid work, the code and the intellectual property transfer to you
- Repositories and accounts stay in your name where possible
- Handover includes documentation and a runbook
Confidentiality
What we keep private.
- We sign an NDA before we see anything sensitive
- Several of our cases are shown anonymously because the clients asked for it
- We name a client only with permission
Security in the work
How we build.
- Least-privilege access to your systems
- Secrets kept out of code and chat
- Code review and automated tests on every change
- A security review for sensitive systems, with an independent assessment when it matters
AI work
Where models are involved.
- Scoped permissions and logged actions for agents
- Human approval for irreversible steps
- We scope what data a model sees and where it is processed
Data handling
What we touch.
- We use only the data the work needs
- Production data stays in your environment
- Test data is anonymized where possible
What we do not claim
Said plainly.
- We do not hold SOC 2 or ISO 27001 certification today
- We can work inside your certified environment and follow your controls
- We do not promise certification outcomes
Who works on your project
A core team leads. Specialists join where the work needs them.
Before you sign
We say who does what: the people leading, the specialists joining, and what each will work on. Nobody joins your project unnamed.
FAQ
Questions from vendor reviews.
Do you sign NDAs?
Yes. We sign one before we see anything sensitive, and we can use yours.
Who owns the code?
You do. On paid work the code and the intellectual property transfer to you.
Can you work in our tools and environments?
Yes. We work in your repositories, tracker and cloud accounts, and follow your access rules.
Where is our data processed?
Production data stays in your environment. Where a model or a tool processes data, we agree where and under which terms before the work starts.
Do you have SOC 2 or ISO 27001?
Not today. We work inside your controls, and we do not promise certification outcomes.
Send us your security questionnaire.
Have a vendor form or a contract template? Send it with your first message. We reply with a clear next step, usually within 24 hours.