Confidentiality and code ownership
Let us know if you need an NDA before sharing private details. Define code ownership, third-party licensing, repository access and handover requirements in the project agreement.
SECURITY / DELIVERY REQUIREMENTS
Clear requirements.
Before delivery begins.
Bring your security, confidentiality and procurement requirements into the first conversation. Specific controls and responsibilities are confirmed for each engagement.
Discuss your requirementsWHAT WE REVIEW TOGETHER
A shared plan
for responsible delivery.
Data and processing responsibilities
Identify the data involved, hosting locations, access needs, storage and deletion periods, and any required data-processing agreements. Share your procurement requirements before delivery planning.
Access and environments
Agree account ownership, permission levels, authentication requirements such as 2FA, any VPN requirements, and separation between development, testing and production environments.
Reviews and release gates
Define code-review expectations, dependency checks, testing, security reviews and release approvals. Confirm who owns each step and what evidence your team needs.
Devices, backups and offboarding
Agree device requirements, backup ownership, recovery expectations and the process for removing access. Include these responsibilities in onboarding and handover planning.
Evidence for procurement
Send your vendor questionnaire and required evidence early. We can review the requested scope, identify questions and confirm the delivery requirements before an engagement is agreed.
FROM REQUIREMENTS TO AGREEMENT
Make responsibilities clear.
Share the requirements
Provide your questionnaire, access constraints and the information your procurement team needs.
Review the scope
Discuss the product, data, environments and evidence needed for the proposed engagement.
Agree before access
Confirm responsibilities, contractual terms, required controls and onboarding steps before delivery starts.
CONTRACTS & DATA PROTECTION
Agree requirements early.
NDA and code rights
We have reviewed contract documentation. Confidentiality, code rights, third-party licences and handover are agreed for the specific project.
DPA and data transfers
Where processing is involved, agree roles, data, safeguards and any applicable transfer mechanism, such as EU standard contractual clauses, before access begins.
Commercial terms
We invoice in EUR. Confirm rates, billing cadence and minimum duration in the proposal. Tax treatment is determined for the specific agreement.
Have requirements
we should review?
Start with a summary of the project and the controls you need. Let us know if confidentiality terms should be discussed before you share further detail.
Start a conversation