How we handle your code and data

You own the work

Code, designs, documentation and the accounts we create for your project belong to you. We work in your repositories and cloud accounts where you prefer, so nothing is held back at the end.

Confidentiality

Ask for an NDA and we sign one before you share anything confidential. Everyone who works on your project is bound by confidentiality in their contract with us.

Access

• Each person gets their own named account. We don’t share logins.
• Access is limited to the people working on your project, and only to what they need.
• Our team signs in to email and documents with Microsoft 365 work accounts.
• Secrets and keys go in a secrets manager or your own vault, never in code or chat.

Your data

We use the least data the work needs, prefer test or anonymised data during development, and keep production data in your systems. For AI work, we use model providers whose business terms don’t train on your data, or run models in your own cloud account when your policies require it.

When the work ends

We hand over the code, documentation and credentials, remove our team’s access, and delete copies of your data we no longer need, unless the contract says otherwise.

What we do not claim (yet)

We don’t hold ISO 27001 or SOC 2 certification, and we won’t imply that we do. If your security review needs evidence, send us your questionnaire and we’ll answer it in writing.

Security questions

Questionnaires, NDAs and anything you found that looks wrong: