Security & IP Policy

1. Intellectual property ownership

Work we create for a client belongs to the client. Source code, design assets, documentation and other deliverables are transferred to you as set out in the signed project agreement, normally on payment of the related milestone.

Open-source and third-party components used in a project remain under their own licences. We tell you which ones are used.

2. Confidentiality

We are happy to sign a non-disclosure agreement before you share project details. Information you share with us is used only for your project and is not disclosed to anyone outside the team working on it.

3. Access and credentials

• Access to client systems is limited to the team members who need it.
• Credentials and secrets are kept out of source code.
• Access is removed when a team member leaves the project or the engagement ends.

4. Secure development

• Code is kept in private repositories with review before changes are merged.
• Changes are tested on a staging environment before release.
• Security testing is included in the QA phase of our delivery process.

5. Client data

We use production data only when a project requires it and you have approved it. For AI projects, your proprietary data is used only to build your solution and is not used to train models for anyone else.

6. After delivery

Projects include a post-launch warranty period for fixing defects, as stated in the project agreement. At the end of an engagement we hand over the code, documentation and access, and remove our own access on request.

7. Reporting a security concern

If you believe you have found a security issue in this website or in work we have delivered, please write to us using the contact details below. We will acknowledge your report and look into it.