HOME / COMPANY / SECURITY & DATA
Security & data
How we handle what you give us.
Every engagement puts your code, your data and your systems in our hands for a while. This page says, in plain terms, what we do with them, what we never do, and what you can ask us to prove.
NDA BEFORE DISCOVERY ◆ YOUR CODE, YOUR REPOSITORIES ◆ ACCESS SCOPED AND REVOKED ◆ PROOF ON REQUEST
During an engagement
The standing commitments.
We sign your NDA, or ours, before Discovery begins and before we see anything that matters.
The code, documentation and repositories are yours, and the engagement agreement says so in writing. We work in your repositories where you prefer it, and hand over cleanly where you do not.
Access is scoped to the work, granted per person, and revoked at the end of the engagement or when a seat changes.
Secure development practices, dependency review and code review are part of how the work is done, not a phase after it.
We tell you what we need access to and why, we do not copy production data outside your environment without written agreement, and we do not use your data to train models.
For systems ZTG operates for you, an incident is contained first, you are notified promptly within the terms of the engagement, the cause is investigated, and the matter is closed with a written post-incident report.
Where HIPAA, SOC 2, GDPR or fiduciary obligations apply, they shape the architecture from the first design decision, and we document the controls so your auditors can follow them.
The desk on this site
A ZTG instrument, and what it does with your text.
The brief's first read and the desk, on the contact page and in the header of every page, are built by ZTG: the firm's method, its fact sheet, its guardrails and its voice, with a language model as one component inside them, the way a cloud is a component in everything the firm builds. They are a working example of the AI engineering ZTG delivers; for your own systems ZTG builds on whatever perimeter your data and your regulators require, from private cloud to on-premises, open-weight and privately trained models, to air-gapped deployments, as set out under Your model, your perimeter. Treat them the way you would treat a first phone call: describe the shape of the problem, and keep the specifics for the NDA that comes before Discovery.
Typed into the brief or the desk, in your own words.
ZTG's instrument writes it, on enterprise model infrastructure under commercial terms that forbid training on your input. Your text is used for that reply and nothing else.
Then it reaches the engineer who replies to you. Otherwise ZTG keeps nothing.
NOT USED TO TRAIN ANY MODEL · KEPT ONLY IF YOU SEND A BRIEF · NO TRACKING COOKIES · THE SHAPE OF THE PROBLEM HERE, THE SPECIFICS AFTER THE NDATHE PRIVACY POLICY →
For procurement
The file for the file.
A capability statement for vendor evaluation, and the administrative facts a procurement team asks for first.
The firm, its practices, method, team configurations, security commitments, leadership, selected engagements and contracting details, on three pages.
DOWNLOAD · PDF · 3 PAGES →- Legal entity
- Zakkour Technology Group, LLC
- Registered office
- 1221 Brickell Avenue, Suite 900, Miami, FL 33131, United States
- Regional offices
- London and Doha street addresses, and regional contracting arrangements, confirmed when an engagement is scoped
- Insurance
- Professional liability (errors and omissions) coverage, increased for specific engagements where a client requires it; certificates of insurance naming the client, on request
- Vendor forms
- W-9, certificates of insurance, vendor registration and supplier questionnaires, on request
- The desk
- hello@zakkourtechnologygroup.com · the regional desks: London and Doha (ztgdoha.com)
What you can ask for
Proof, on request.
Vendor security questionnaires, our written policies, evidence of the controls above for a specific engagement, references from clients in regulated industries, the certifications held by the engineers proposed for your work, and, where an engagement calls for them, the compliance attestations relevant to it. Ask the desk that answers your region and it will be arranged before the first workshop.