Most agencies make procurement teams chase them for 2–4 weeks before signing. We don't. The full standard pack — MSA, SOW, DPA, insurance certificate, sub-processor list, security white paper — ships within 1 business day of an email request. No pre-call required. Procurement reviews, redlines if needed, signs.
Standard MSA template covering engagement terms, IP assignment to customer, confidentiality, liability caps, indemnification. Redlinable. ~12 pages, plain English.
Per-engagement template populated after audit/scoping. Lists deliverables, milestones, payment schedule, acceptance criteria, fixed price.
GDPR-compliant DPA. Defines us as a sub-processor where applicable, lists our sub-processors (cloud + LLM providers), specifies data flows, controller-processor obligations.
For HIPAA-regulated engagements. Covers our access to PHI in your environment. Coordinated with downstream provider BAAs (AWS, Anthropic) on your accounts.
Current, in-scope. Quality management system audited annually. PDF + auditor verification details.
Current insurance certificates. Standard limits cover most engagements. Higher limits available on request for enterprise SOWs.
10-page document covering: corporate security posture, build-time security controls, deployment posture, access management, incident response, vulnerability disclosure.
Current list of cloud providers (AWS, GCP, Azure) and LLM providers (Anthropic, OpenAI) we deploy on. Updated quarterly. Notification process for additions.
Documented response process for P1/P2 incidents in your environment during build or managed period. Response SLAs by tier. Post-mortem template. Notification protocol for data-handling incidents within 24 hours.
Subject: "Procurement pack request" (or just hit the button below). Include: company name, jurisdiction (US / UK / EU / AU / NZ / IN), regulatory context if relevant (HIPAA, FINMA, etc.), and the engagement you're considering.
All 9 documents as PDFs, plus any jurisdiction-specific addenda. Sent from a real engineer's email, not a no-reply auto-responder.
Standard redlines accepted (limitation of liability tweaks, payment terms, governing law). Atypical asks (e.g., "we own everything we see during the engagement") get a counter-proposal. Most signings happen in 1–2 weeks.
Or book a 15-min call if you'd rather walk through the pack live with our engineer.
Why this works: AI-paired senior engineers raise the floor on quality + consistency · 250+ products shipped · direct vendor billing — you keep the wrapper margin. → The full method