Security and GDPR, handled before anyone gets access
Your contract is with Aegis Edge, an EU company in Bucharest. The paperwork that makes offshore work lawful under GDPR is signed before an engineer sees your code.
The paperwork, and when it is signed
| Document | Between | Signed | Covers |
|---|---|---|---|
| Master services agreement | Aegis Edge and you | Before work starts | EU law, EUR invoicing, IP assigned to you, notice periods. |
| Data Processing Agreement (Art. 28 GDPR) | Aegis Edge and you | Before any access | What data, for what purpose, which security measures. |
| Standard Contractual Clauses | EU entity and the team in India | Before any access | The EU-approved basis for transferring personal data to India. |
| Sub-processor list | Shared with you | Before any access, updated on change | Every company that can touch your data, and where. |
| Individual NDAs | Each engineer | Before joining your project | Confidentiality on top of the company contract. |
Access and devices
- Engineers only get access to the systems their work needs
- Access removed within 24 hours when someone leaves the project
- Company-managed laptops with disk encryption, MFA and endpoint protection
- Code and data stay in your GitHub, GitLab and cloud accounts. We keep no copies
- Synthetic or anonymised test data wherever possible
AI tools
- Business-tier tools only (Claude, Cursor, GitHub Copilot), with training on your data switched off
- No client data pasted into public AI tools
- A senior engineer reviews every AI-assisted change before merge
- AI features we build for you ship with documentation for EU AI Act obligations
Regulation we work with
Ask for our security document on the first call. We send it before you sign anything.
- GDPR
- DPA and Standard Contractual Clauses before any access. Named sub-processors.
- NIS2
- Our security controls documented for your supplier assessment.
- DORA
- Support for ICT third-party risk reviews in financial services.
- EU AI Act
- Documentation and human review built into the AI features we ship.
Need our security document?
We send it before you sign anything, together with a draft DPA.