Legal.

This website collects only what is needed to respond to an enquiry and to measure traffic. Analytics are privacy-first and carry no advertising trackers.

Client identities and customer data are confidential and are never used for marketing. We do not name clients or use their logos without a separate written agreement, and our standard MSA prohibits it.

Information submitted through a form is used only to prepare the operating plan or to answer the enquiry, and is deleted on request.

The content on this site is provided for information. Reference figures, rates and attainment values are illustrative of live engagements and are not an offer; commercial terms are set in a Statement of Work.

Templates and schemas in the Library are provided as-is for your own use.

We act as processor / service provider. The Data Processing Agreement is executed before go-live and covers GDPR, UK GDPR, CCPA/CPRA and other US state laws, DPDP (India), and PIPEDA with applicable provincial legislation.

Customer data is processed solely for the Statement of Work, never used to train or improve any model or system of ours, and never retained beyond the requirements of the ticket. Processing jurisdictions are disclosed; none are added without 30 days' notice and client approval.

Breach notification within 24 hours of awareness. Audit on 10 days' notice. Full text available under NDA.

The current list, with purpose, location and date added, is published in the Trust Centre. Changes are notified 30 days in advance.

Before access, every engineer signs confidentiality, IP assignment and acceptable-use undertakings. In summary: named accounts only; no shared logins; no screenshots, downloads or storage of customer material outside client tooling; only client-approved AI tools may touch customer data, code or prompts; changes to customer applications only through client tooling, attributable and reversible.