How do you handle NDAs and confidentiality?
We routinely sign non-disclosure agreements, usually before the first detailed conversation, and are happy to work under yours. Access to client systems and data is limited to the team working on the engagement, credentials are held in a managed secret store, and client material is never reused in other work. Projects that cannot be named publicly are shown in anonymised form in our case studies.
Wherever possible, development and testing use synthetic or anonymised data rather than production data. Where production access is required, for example to diagnose an issue, it is time-limited, logged and restricted to named individuals.
If any part of an engagement would involve a subcontractor, you are informed in advance and the subcontractor is bound by the same terms.
No client work is published without written permission, requested at the time we would like to publish.
Additional security requirements, such as data residency, vendor assessments, penetration testing or network restrictions, should be raised during discovery so they can be included in the plan and estimate.
Related service
Custom SaaS DevelopmentMulti-tenant platforms with billing, administration and access control built in.
Was this helpful?