Access & systems

Your code. Your data.
Locked down.

Every engineer operates under strict access controls, managed devices, and binding legal agreements. Your IP stays yours — no exceptions. Investor due diligence coming? These answers hold up.

How we protect you

Four pillars, no shortcuts

Access Control

  • Role-based access — engineers only see what they need
  • Two-factor authentication enforced on all tools
  • Access revoked within 15 minutes of offboarding
  • Per-developer scoped permissions on your repos
  • No shared credentials — ever
  • Quarterly access reviews with your team

Legal & Agreements

  • NDAs signed before any project access
  • Full IP assignment — your code is your code
  • Work-for-hire clauses in every contract
  • Non-solicitation and non-compete terms
  • Data Processing Agreements available
  • GDPR-compliant data handling

Systems & Devices

  • Company-managed laptops with full-disk encryption
  • Automatic OS and security patch updates
  • Screen lock enforced at 2 minutes idle
  • VPN required for accessing client environments
  • Endpoint protection on every machine
  • Remote wipe capability if a device is lost

Development Practices

  • Code stays in your repos — we never fork or mirror
  • Secrets managed via Vault or your preferred tool
  • Branch protection and PR review policies
  • Audit logs on all deployments
  • Isolated dev environments per client
  • No production access without your approval

The short version

Your repos

We never fork or mirror

Your IP

Full assignment, day one

Your rules

We follow your security policy

Common questions

Security FAQ

What happens when a developer leaves?
All access is revoked within 15 minutes. Device is remotely wiped. Your code and repos are untouched — they were always yours. We provide a replacement developer at no extra cost.
Can developers work in our VPN / VDI environment?
Yes. We can connect to your corporate VPN or set up VDI so engineers work inside your infrastructure. Your data never touches our local machines.
Do you sign NDAs?
Always. Before any project access, every engineer and our company sign your NDA. We can also sign DPAs, MSAs, and custom security questionnaires.
Who owns the code?
You do. Every contract includes full IP assignment and work-for-hire clauses. Code lives in your repositories. We have no claim to any work product.
Can you pass our security questionnaire?
We handle these regularly. Share yours and we'll respond within 48 hours. We also have a standard security overview document we can send immediately.

Have a security questionnaire?

Investor asking about security posture, or a customer's vendor review? Share it — we'll respond within 48 hours.

security@nigeriadevelopers.com