Privacy rules shape architecture. We agree hosting and data handling with you during discovery, not after launch.
Where your users are shapes how we build
| Your users are mainly in | What we design for | Rules we plan around |
|---|---|---|
| European Union & UK | Hosting in-region; data processing agreements | GDPR and UK GDPR |
| United States | Region and vendors chosen for your sector | State privacy laws; HIPAA where it applies |
| India | Consent and purpose recorded for every data flow | Digital Personal Data Protection Act, 2023 |
| United Arab Emirates | Hosting region agreed with you; data minimised | UAE PDPL; DIFC and ADGM regimes |
| Saudi Arabia | In-Kingdom hosting where required, including backups | Saudi PDPL, enforced by SDAIA |
A summary of how we plan, not legal advice. Your counsel confirms what applies to your product.
How we handle your systems
Your accounts, least access. Named, individual access to your cloud and repository, removed at handover.
No production data on laptops. Development uses anonymised or generated data.
Secrets in a vault. Never in code, chat or email.
This website. The contact form collects only what we need to reply, and nothing is sold or shared for marketing.