How we protect your data, code and intellectual property.

Written for your technology team and your lawyers, in plain language. A two-minute read.

Your data

We take only the data a project needs, hold it in your environment or ours under a data-processing agreement, encrypt it in transit and at rest, and delete it on request or at the end of the engagement. Nothing you give us is used to train anyone else's model.

Your code and secrets

Code lives in your repository from the first week. Secrets live in a vault, never in chats, documents or code. Access is per person and removed the day someone leaves the project.

Intellectual property

You own what we build for you: code, models, designs and documents, yours from the first week and assigned in the contract. We keep only our reusable tooling, which is listed in the brief.

How we use AI tools

We use AI tools in our own work for drafting, review and testing, under our own accounts, and we never send your confidential data to a tool outside the agreement. Every agent we build says what it is where the law requires, logs its actions, and hands over to a person.

The laws we work under

GDPR for European clients, UK GDPR for the United Kingdom, CCPA and CPRA for California, DPDP for India, PDPL for the UAE and Saudi Arabia, and the consent and disclosure rules of each country an agent operates in.

Security practice

Two-factor sign-in everywhere; dependency and vulnerability scanning on every build; backups verified monthly; incident response with a named owner and a 24-hour notification commitment.

Tell us what should change first