Security, IP & AI Policy
How iSoft International protects your code, your data and your intellectual property, and how we use AI responsibly.
- NDA before details
- Your code, your IP
- Human review of AI-assisted code
You trust us with your ideas, your code and sometimes your customers' data. This page explains how we protect them. If your company has its own security requirements, we follow them.
Your code and intellectual property
The code, designs and documents we create for you belong to you. We prefer to work in repositories and cloud accounts that you own, so you always have full access, from the first commit.
Confidentiality
We sign your NDA (or ours) before you share details. Everyone who works on your project is bound by a confidentiality agreement with us.
Access control
- Only the people working on your project get access, with the lowest rights they need.
- Two-factor authentication on code repositories and cloud accounts.
- Access is removed the day someone leaves the project.
- Production credentials are never shared in chat or e-mail.
Data protection
We use anonymised or sample data in development whenever possible, keep production data in production, and test backups by restoring them. For clients in the EU and UK we can sign a data processing agreement (DPA).
How we use AI
- Which tools: AI coding assistants from established vendors, used under business terms that do not allow training on customer content.
- What never goes in: passwords, keys, personal data or production databases.
- Human review: every AI-assisted change is reviewed by a senior engineer and covered by tests before it is merged.
- Your choice: if your policy restricts AI tools, we work without them on your project or only with the tools you approve.
Questions
Ask us anything about security before you sign. We are happy to fill in your vendor security questionnaire.