Security & ownership
Your code.Your data.Your network.
Before we write a line of code, you know who owns what. A mutual NDA, a clear statement of work, and source code that passes to you once it is paid. Here is exactly what you get.
- Mutual NDA before discovery
- Source code passes to you once paid
- DPA on request
- Incident notice without undue delay
Illustrative. Every engagement follows these stages.
You own what you pay for.
Custom work is yours. The rules are short, written down, and the same for every client unless your contract says otherwise.
Your source code
Ownership of custom deliverables, including their source code, passes to you once they are paid in full.
Our toolkit, licensed to you
Our pre-existing tools, libraries and know-how stay ours, with a perpetual licence for you to use them as part of what we deliver.
Open source, declared
Open-source components keep their own licences. Ask, and we list every one a deliverable includes.
White-label, licensed
Our SaaS and white-label platforms stay ours and are licensed to you, not sold. Your brand and your data stay yours.
If you ever move on
When an engagement ends, you leave with everything you paid for:
- We hand over the deliverables and source code that have been paid for.
- We return or delete your data, as agreed.
- We can support the transition to another team at the agreed rates.
Paperwork first. Then code.
Every engagement runs the same way, so there are no surprises on scope, cost or who owns the result.
Full wording in our Terms. A signed contract always takes priority.
Step 1
Mutual NDA
Signed on request, before any discovery work. Your network, roadmap and numbers stay private.
Step 2
Statement of work
Scope, deliverables, timeline, fees and acceptance criteria, agreed before payment. Typically 20% upfront, the rest by milestones.
Step 3
Build in the open
A named point of contact on our side, regular updates and access to work in progress.
Step 4
Changes in writing
Any change to scope or timeline is agreed in writing first, with its effect on fees and dates.
Step 5
Acceptance
Deliverables are reviewed against the criteria in your SOW. Anything that misses them, we fix.
Step 6
Handover and warranty
Paid deliverables and source code are yours. If something does not match the spec, we fix it at no extra cost during the warranty period.
How we protect your data.
The same measures apply to your data whether it sits in a charger log, a payment record or a shared document.
Encrypted
Encryption in transit (TLS/SSL), and encrypted storage where the data needs it.
Hardened infrastructure
Firewalls and hardened, regularly updated servers.
Need-to-know access
Roles and permissions on every system, and credentials kept out of source code.
Confidential by contract
Everyone on our team and every subcontractor is bound by confidentiality and IP terms. We stay responsible for their work.
Incident response
If an incident touches your data, we contain it and notify you without undue delay, and regulators where the law requires.
Never sold
Your data is never sold or shared for advertising. At the end of an engagement it is returned or deleted, as agreed.
- DPA on request for data we process on your behalf
- We act only on your documented instructions
- GDPR rights honoured where they apply
- Standard contractual clauses for cross-border transfers where they apply
Details in our Privacy Policy.
Security built into what we ship.
The platforms we build for you are designed for operators, partners and site hosts who should never see each other's data.
Secured charger links
OCPP security profiles for authenticated, encrypted charger connections.
- OCPP 2.0.1
- TLS
Roles and permissions
Every user sees and does only what their role allows, from platform admin to site host.
- RBAC
Tenant separation
Each partner and site host sees only their own sites, sessions and revenue.
- Multi-tenant
Modern sign-in
Token-based authentication for apps, dashboards and APIs.
- JWT
- OAuth 2.0
Monitoring built in
Errors, metrics and alerts wired in from day one, so issues surface early.
- Sentry
- Prometheus
- Grafana
Tested before real chargers
Every flow exercised against OCPP simulators before it touches a live connector.
- OCPP simulators
Questions procurement asks us.
Who owns the source code?
You do, once the work is paid in full. Ownership of custom deliverables, including their source code, passes to you. Our pre-existing tools and libraries stay ours, and you get a perpetual licence to use them as part of what we deliver. A signed contract can set different terms.
Will you sign an NDA before we share details?
Yes. On request, we sign a mutual NDA before any discovery work.
Do you sign a data processing agreement?
Yes. Where we process personal data on your behalf, we act only on your documented instructions, protect it with appropriate security measures and sign a DPA on request.
Do you use subcontractors?
Where useful, yes. They are vetted and bound by confidentiality and IP terms at least as protective as ours, and we remain responsible for their work.
What happens if we move to another team?
We hand over the deliverables and source code that have been paid for, return or delete your data as agreed, and can support the transition to the new team at the agreed rates.
What if a deliverable does not match the spec?
Tell us within the review period in your SOW and we fix it. After acceptance, if a deliverable does not match the agreed specification, we re-perform or fix the work at no extra cost during the warranty period set in the contract.
Is a white-label platform also ours?
Our SaaS and white-label platforms stay ours and are licensed to you, not sold. Your brand, your domain and your data stay yours.
Need our NDA, MSA or DPA?
Email us with “Security” or “Contract” in the subject line and it reaches the right person quickly.
Available
Ready to switch on your charging network?
Book a 30-minute call with our team. Whether it’s your first charger or a growing network, you’ll leave with a clear plan.
30 min · video call
L1 · L2 · L3, 120° apart
DC link
DC to the car
- 1
Tell us where you are
Your chargers, your market, and what you want to launch.
- 2
We map the build
CSMS, OCPP and OCPI, payments and apps, scoped to your business.
- 3
Leave with a plan
A clear next step, whether you build your own or start on ours.
Mumbai, India · working with EV teams worldwide