What we access, where your data goes, and when access ends
One page for your security team. We're a two-person studio, not SOC 2 or ISO 27001 certified, so we work inside your accounts and keep as little as possible on our side.
| Question | Answer |
|---|---|
| Where do we work? | In your accounts, with your SSO. |
| Where does your code live? | Cloned only to our encrypted work laptops, or kept on your devices or VDI if you require it, and deleted at handover. |
| What access do we need? | Read-only for diagnostics and baselines: Jira and Git for product teams; for operations, only the mailbox, folder or ERP export being automated, through your own accounts. When we build, write access only to the repositories and accounts named in the contract. |
| Which AI models? | Only ones you approve in writing: EU-region business endpoints that keep nothing after the request (for example AWS Bedrock or Mistral, or Azure OpenAI once Microsoft has approved turning its abuse monitoring off), or open models on your own servers. |
| Personal data? | Names, emails, phone numbers, IDs and your own identifiers (IBANs, account and customer numbers) are detected on your systems with Microsoft Presidio (open source) plus rules for your formats, and replaced with placeholders before any cloud model sees the text. The mapping never leaves your systems, and anything the detector isn't sure about is held back. Pseudonymised text is still personal data under GDPR, so the model endpoint is named as a sub-processor in your DPA. During the engagement we spot-check the redaction log weekly with whoever owns data protection on your side. |
| Sub-processors? | None besides the model endpoints you approve. No subcontractors. |
| Where is extracted data stored? | In your accounts only: the scripts write their output into your storage. |
| When is access removed? | On handover day. We confirm removal and deletion in writing. |
| Contracts | Your NDA and DPA, signed before access. Professional liability insurance available for any engagement on request: arranged before work starts, with the cover amount agreed in the contract. |
Send us the questionnaire.
Your vendor review form, in whatever format it comes. We fill it in before the first call, and we say plainly where the answer is no.
Write to usThen a 30-minute call in your office hours.