Security
Secure development expectations, least privilege, protected secrets, environment separation and issue escalation are defined per engagement.
TRUST CENTRE · PROCUREMENT
Make vendor due diligence easier.
A structured starting point for enterprise, institutional and public-sector procurement teams. We state what exists, what is engagement-specific and what must not be inferred.
Data handling
Data categories, retention, access, locations, subprocessors and deletion requirements are agreed before sensitive data is processed.
Delivery governance
Scope, decision logs, change control, acceptance criteria, risk register and responsible owners can be built into project governance.
Subcontractors
Specialist subcontractors may be used only where scope requires them and contractual/data obligations are appropriately addressed.
Evidence boundaries
We do not claim certifications, audits, customers, partners or regulatory approvals that cannot be evidenced.
SLAs
Response, support, uptime and recovery commitments apply only when explicitly included in the signed service schedule.