Security
We work inside your environment, under your controls.
- Access through your identity provider and single sign-on, with named accounts and least-privilege roles.
- Agents run in your cloud tenancy or your vendors’ enterprise tiers, not on infrastructure we own.
- Secrets stay in your vault. We do not store credentials in code, tickets or chat.
- Access is removed at handover, and we confirm it in writing.
AI governance
Every agent has an owner, a risk tier and a record.
- Each agent gets a risk tier before it is built, agreed with your risk or legal lead.
- Consequential actions wait for a named person to approve them. The approval is logged.
- Every read, draft, approval and action lands in an audit log you own and can export.
- Agents are tested against agreed evaluations before go-live, and can be switched off in one step.
Data handling and residency
Your data stays yours, in the regions you choose.
- We build in the cloud region you specify, so data residency follows your policy.
- We do not use your data to train models, and we choose model tiers whose terms say the same.
- We keep no copies of your data after the engagement, beyond what the contract requires.
- We list every third-party service in the design document before anything is connected.
Accessibility
What we build should work for everyone who uses it.
- We design interfaces and agent outputs to WCAG 2.2 AA as a target, and test with keyboard and screen readers.
- This website follows the same target. Tell us where it falls short and we will fix it.
