What your procurement team will ask

Sofitect LTD, England and Wales, company number 14625541, VAT GB43522907, registered office 71-75 Shelton Street, London. Sofitect East SRL, Romania, ROONRC.J2024010694406, CIF 50149727, Hermes Business Campus, Bucharest. You contract with either, in GBP, EUR, USD or AUD; the same people deliver. Contracts and questionnaires are signed by Marius Telespan, managing director; every engagement also has a named engagement lead and a second engineer.

Your repository, your cloud account, your pipeline. We do not host client systems or client data. Access is through accounts you issue, so you can see it and revoke it.

We are 28 engineers, mid and senior only. On the first call we tell you who is available for your engagement, by name. Before an engineer is given access, they sign a confidentiality agreement, assign intellectual property to the client and are checked to whatever standard your policy requires.

Professional indemnityany one claim, unlimited in the period

£1,000,000

Public liabilityany one claim

£2,000,000

Products liabilityany one claim and in the aggregate

£2,000,000

Employers' liabilityany one claim

£10,000,000

Professional indemnity can be increased to £5,000,000 for a bank engagement where your terms require it, at our cost.

Underwritten by Accredited Insurance (Europe) Limited UK Branch, arranged by Kingsbridge. Cover is worldwide except the USA and Canada, reviewed at each renewal. Certificate of insurance on request.

We do not subcontract client work. If an engagement ever needed it, it would happen with your written consent and under your terms, or not at all.

ISO 27001 certification is in progress: we are appointing the certification body. We are also obtaining Cyber Essentials Plus for the UK entity. Until both are issued, we answer security questionnaires in full and describe the controls we run rather than point to a badge. The access, data handling, subcontracting and continuity positions on this page are the substance of those answers, and we will evidence each of them in your questionnaire. Our DevOps lead, Oleg Prysiazhniuk, ran cloud governance and SOC 2 controls at a fintech before joining Sofitect.

Regulated clients need audit, access and information rights in the contract, including for their regulator; PRA SS2/21 and the EBA outsourcing guidelines set out why. We are used to them and expect them in the terms.

Every engagement has a named lead and a second engineer who knows the code. Documentation and infrastructure as code from week one.

A supported handover to your team is part of every engagement, not a change request. Your repository, your cloud account and your pipeline hold everything from day one, so there is nothing to migrate at the end.

Where we process personal data for you we act as processor under a written agreement. The EU entity keeps work inside the perimeter when your model needs it.