Access model
Read-only access first. Named individuals only, scoped IAM roles, MFA, no shared credentials. Production changes only through your change process and approvals.
← Home
Trust Center
For security, risk and procurement teams. Each commitment below is part of our standard contract terms, and the signed agreement governs. We say what is still in progress, and we don't claim certifications we don't hold.
Our commitments
Data handling
We work on your systems where possible rather than copying data out. Any data we hold is minimized, encrypted, access-logged and deleted at engagement end, as defined in the SOW.
Confidentiality and IP
Mutual NDA available before discovery. Deliverables and code produced for you are yours under the SOW.
Subcontractors
Disclosed by name and role before work starts, bound by equivalent confidentiality and security terms, and only with your written approval.
Incident communication
Suspected security incidents affecting your environment or data are reported to your named contact without undue delay, with facts, scope and actions.
AI work
No client data used to train third-party models. Evaluation, logging and human approval for high-risk actions are part of every AI design.
Insurance
Professional liability and cyber coverage being arranged. Certificates provided on request once bound.
Supplier pack
Company details, security questionnaire responses and contract templates for your vendor-risk process.
Request the supplier pack
Tell us your company and the review you are running. We respond with the documents your process needs.
Request supplier pack