Security & NDA
Your code and data, kept safe.
How we protect your store, your code and your customers' data, from the first call to long after launch.
In short
- NDA before detailed discussions
- You own all code and designs
- Our own logins, never your password
- Access removed when the project ends
- Customer data stays in your systems
How we protect you
Security built into the process.
NDA and contract
Confidentiality is in our contract, and we sign your NDA if you have one.
Least access
Each person gets their own login with only the access they need, with two-factor authentication where the platform supports it.
Code in your Git
Code lives in a GitHub, GitLab or Bitbucket repository you own, with reviewed pull requests.
Staging first
Changes are built and tested on a staging copy before they reach your live store.
Customer data
We work with test data where possible and never export customer data without your written request.
Clean hand-over
At the end of a project we hand over all credentials and remove our access, and confirm it in writing.
Ownership
What you own.
Yours, always
- All custom code and theme changes
- Designs and design files
- Your Shopify, hosting, domain and app accounts
- Your data, content and analytics
We keep
- Our internal tools and general know-how
- The right to show the project in our portfolio, only if you agree
FAQ
Questions from legal and IT teams.
Will an outsourcing agency sign my NDA?
Yes. We can sign your NDA before the first detailed call, or send you ours.
Who owns the code after the project?
You do. Once the work is paid for, all code, designs and content we create for you belong to you. This is written in our contract.
How is customer data protected?
We work with test data where possible, use our own logins with two-factor authentication wherever the platform supports it, and never export customer data without your written request. Data stays in your own accounts, and at the end of the project we hand over all credentials and remove our access.
Do you need our passwords?
No. We ask to be added as a collaborator or user with our own login, so you can remove access at any time and see what we did.
Where is our data stored?
In your own accounts (Shopify, hosting, Git) wherever possible. We do not keep copies of customer data after the project unless you ask us to.
Talk to us
Send us your NDA.
We are happy to sign it before we discuss your project in detail.




