Access model
Read-only access first. Named individuals only, scoped IAM roles, MFA, no shared credentials. Production changes only through your change process and approvals.
For security, risk and procurement teams. Each commitment below is part of our standard contract terms, and the signed agreement governs. We say what is still in progress, and we don't claim certifications we don't hold.
Read-only access first. Named individuals only, scoped IAM roles, MFA, no shared credentials. Production changes only through your change process and approvals.
We work on your systems where possible rather than copying data out. Any data we hold is minimized, encrypted, access-logged and deleted at engagement end, as defined in the SOW.
Mutual NDA available before discovery. Deliverables and code produced for you are yours under the SOW.
Disclosed by name and role before work starts, bound by equivalent confidentiality and security terms, and only with your written approval.
Suspected security incidents affecting your environment or data are reported to your named contact without undue delay, with facts, scope and actions.
No client data used to train third-party models. Evaluation, logging and human approval for high-risk actions are part of every AI design.
Professional liability and cyber coverage being arranged. Certificates provided on request once bound.
Company details, security questionnaire responses and contract templates for your vendor-risk process.
Tell us your company and the review you are running. We respond with the documents your process needs.
Request supplier pack