Security & NDA

Your code and data, kept safe.

How we protect your store, your code and your customers' data, from the first call to long after launch.

In short

  • NDA before detailed discussions
  • You own all code and designs
  • Our own logins, never your password
  • Access removed when the project ends
  • Customer data stays in your systems

How we protect you

Security built into the process.

NDA and contract

Confidentiality is in our contract, and we sign your NDA if you have one.

Least access

Each person gets their own login with only the access they need, with two-factor authentication where the platform supports it.

Code in your Git

Code lives in a GitHub, GitLab or Bitbucket repository you own, with reviewed pull requests.

Staging first

Changes are built and tested on a staging copy before they reach your live store.

Customer data

We work with test data where possible and never export customer data without your written request.

Clean hand-over

At the end of a project we hand over all credentials and remove our access, and confirm it in writing.

Ownership

What you own.

Yours, always

  • All custom code and theme changes
  • Designs and design files
  • Your Shopify, hosting, domain and app accounts
  • Your data, content and analytics

We keep

  • Our internal tools and general know-how
  • The right to show the project in our portfolio, only if you agree

FAQ

Questions from legal and IT teams.

Will an outsourcing agency sign my NDA?

Yes. We can sign your NDA before the first detailed call, or send you ours.

Who owns the code after the project?

You do. Once the work is paid for, all code, designs and content we create for you belong to you. This is written in our contract.

How is customer data protected?

We work with test data where possible, use our own logins with two-factor authentication wherever the platform supports it, and never export customer data without your written request. Data stays in your own accounts, and at the end of the project we hand over all credentials and remove our access.

Do you need our passwords?

No. We ask to be added as a collaborator or user with our own login, so you can remove access at any time and see what we did.

Where is our data stored?

In your own accounts (Shopify, hosting, Git) wherever possible. We do not keep copies of customer data after the project unless you ask us to.

Talk to us

Send us your NDA.

We are happy to sign it before we discuss your project in detail.

You have unsaved changes. Do you really want to close?