Skip to main content

Frequently asked

The questions procurement always asks.

Written for the procurement team you forward this site to. If your question isn’t here, ask us directly — we will answer.

ISection

Engagement & commercials

  • What is the smallest engagement you accept?

    USD 1,000,000 — typically a focused advisory, audit, or single-pillar pilot delivered over 8–16 weeks. Anything below that we will refer to a partner who is a better fit.

  • What does a multi-discipline programme cost?

    Multi-discipline programmes — drawing across two or more of our four pillars — start at USD 10,000,000 annual contract value. The pricing model is Time & Materials throughout. We do not bid fixed-fee on this scale of work.

  • Why Time & Materials and not fixed-fee?

    Two reasons. First, the systems we build are too consequential for either side to want a fixed-fee contractor cutting corners under cost pressure. Second, regulated workloads change scope mid-flight — fixed-fee creates an adversarial relationship every time that happens. T&M with monthly invoices and detailed time logs keeps both sides aligned.

  • How long until we see something?

    Discovery output (a written brief) lands in 2–6 weeks. Design output (architecture, security model, data flows) lands in another 4–10 weeks. From the start of Build, we ship demoable increments every two weeks.

IISection

Team & delivery

  • Who actually does the work?

    The senior people you meet in the first meeting. We do not staff out a junior bench. Every engagement has a named engagement lead, a named senior practice lead per pillar involved, and a named executive sponsor. Those names land on the kickoff document.

  • What if my engagement lead leaves?

    We tell you, immediately. The senior practice lead steps in for continuity, and we replace at the same seniority within 30 days. Knowledge transfer happens in writing — every architectural decision, every customer-facing assumption, every credential boundary is documented as it is made, not at handover time.

  • Can we see the team before we contract?

    Yes. By the end of Discovery — before signing the Build SOW — you will have met every senior team member who will be on the engagement. We bring their actual work, not their CVs.

  • Where is the team based?

    Hybrid. Senior team members work in-region with the customer through Discovery and Design, then one in-person week per quarter through Support. The rest is remote across our distributed practice.

IIISection

Security & compliance

  • Are you ISO 27001 / SOC 2 certified?

    Our information-security and Trust Services controls are aligned to ISO 27001 and SOC 2 Type II frameworks. Audit reports and certificate references are available under NDA on request — see the Security page for the short version.

  • Where does our data live?

    Where we engage on hosted operations, data residency is fixed in the contract before any work begins. We maintain region-specific sub-processor lists and we do not migrate customer data across jurisdictions without written authorisation. For most of our engagements, however, we are building software inside the customer's own infrastructure — so the question doesn't arise.

  • What happens during a security incident?

    Severity 1 incidents trigger first response within 15 minutes, escalate to Tier 2 (senior practice lead) automatically, and to Tier 3 (CTO + executive sponsor) on declaration. Full SLA and escalation paths are on the Security page.

  • Do you sign DPAs / MSAs?

    Yes. We have standard MSA, DPA, and SOW templates that procurement teams can review in advance. We also work with customer paper where it is reasonable.

IVSection

Scope & fit

  • Will you do just one of the four pillars?

    Yes — single-pillar engagements are common at the smaller end. The discount is that you don't get the integrated benefit. The argument for the four together is that we don't hand-off between teams; the same engagement lead owns security, data, integration, and design as one decision.

  • Will you compete against an incumbent?

    Sometimes. Where we add genuine value — usually because the incumbent has gaps across the four pillars — we will. Where the incumbent is doing fine and you just want a second opinion, we are happy to be a paid second opinion in a focused advisory engagement.

  • Will you sign exclusivity in our industry?

    Generally no. Industry exclusivity narrows the pattern library we can apply across customers, which makes us worse at the work. We will sign customer-level NDAs and case-level confidentiality without limit.

Still have a question?

Send it to us directly. A human reads every one.

Ask a question