Contracts & security

What we sign, before you have to ask

This page is for your lawyer, your security lead and your procurement team. Everything on it is a term we put in the contract, not a promise on a website.

Why a small team abroad is a safe choice

What goes wrong with agencies, and what our contract says instead

All contract and security terms
The seniors pitch, juniors build

The people you meet are the people who build

Your proposal names the engineers who will do the work, and you meet them before you sign. A key-person clause means nobody is swapped without your written consent.

The agency keeps the code

Your repository and accounts from the first commit

Code, cloud, app-store and domain accounts are in your name, and we work inside them from day one. The contract assigns the IP to you in the present tense ("hereby assigns"), so there is no later transfer to wait for. Portuguese law (Decree-Law 252/94) also treats commissioned software as the client's by default. lawyer to confirm DL 252/94

The agency disappears

Nothing depends on us staying

You pay per milestone, for work you have seen running. Everything lives in your accounts, and every milestone ends with a written handover: architecture notes and runbooks your next engineer can follow without us.

Code nobody can maintain

Reviewed work, under a 90-day warranty

A second engineer reviews every change before it merges, and code written with AI tools is read line by line (our AI-use policy). Paths that touch money and data have automated tests. A written 90-day warranty covers defects in our work.

Ownership

Your code, your accounts, your IP

  • Your repository from the first commitWe work in your repository and your cloud from the first commit. Nothing is built on our side and moved across later.
  • Accounts in your nameCloud, app-store and domain accounts and third-party API keys are opened in your name. We are added as users you can remove.
  • IP assignment in the contractThe contract assigns the IP to you in the present tense and waives moral rights as far as the law allows. Portuguese law (Decree-Law 252/94) also treats commissioned software as the client's by default. lawyer to confirm DL 252/94
  • No escrow neededYou hold the code from day one, so there is nothing to put in escrow.

The team

Named people, no silent swaps

Your proposal names the people on your project, from the team on our About page, and you meet them before you sign. A key-person clause means none of them is replaced without your written consent. If someone has to leave, you approve who takes over.

No part of the work is subcontracted without your written consent. Where your bank or regulator requires background checks for people with production access, we agree them in the contract.

Warranty

90 days on everything we ship

For 90 days after each release, we fix defects in our own work free of charge: anything that doesn't do what the agreed specification says it should.

New features, changes of scope and outages at third-party providers are not defects. We quote those separately, or cover them under monthly care.

To make a claim, write to info@jobsdone.pro or raise it in the shared tracker. We reply within one working day, and problems in production come first.

Security pack

What procurement gets on day one

  • Data processing agreementUnder UK and EU GDPR Article 28, ready to sign. Personal data can move between the EU and the UK under the EU's adequacy decision, which runs to December 2031.
  • Subprocessor listEvery tool and service that touches your data, and where it is hosted.
  • Questionnaire answersWe answer your security questionnaire in writing, whether it is SIG Lite, CAIQ or your own.
  • CertificationsWe don't hold Cyber Essentials, ISO 27001 or SOC 2 today. We work to the controls they require and help you prepare for your own audit.
  • Insuranceprofessional indemnity and cyber cover: held? amounts
  • Access and incidentsNamed accounts with two-factor authentication and only the access the work needs, removed when we finish. If we suspect an incident, you hear from us in writing without delay.

AI use

How we use AI on your code

We use AI coding assistants, and an engineer designs every change, reviews every line the tool produced and is accountable for it. Your code and data never go to tools that train on them. If your contract restricts AI tools, we work within it, and we tell you where AI was used.

Our AI-use policy

Regulated clients

Supplier terms mapped to your regulator

An annex to our contract that maps our terms to the rules your bank or regulator checks, so the supplier questions in their review have a written answer.

UK · FCA

SYSC 8 outsourcing

Audit and data access for you and the FCA, no subcontracting without your written consent, termination with immediate effect where the rules require it, and a written exit plan.

EU · DORA

Article 30 ICT contracts

Where the service runs and your data is kept, help during ICT incidents, audit and inspection rights, and an exit with a transition period.

US · banks

Interagency third-party guidance

Background checks for people with production access, the right to audit, source code in your name from day one, and an agreed choice of law for a supplier outside the US.

The company

Who you would sign with

Everything procurement checks, in one place.

Legal name
Rising Formula, LDA
Brand
Jobsdone
Registered in
Portugal, city
Company number
registry
VAT
vatID
Working hours
Mon–Fri, 08:00–18:00 UK time
Time zone
Lisbon time: the same clock as London, 4–5 hours ahead of New York
Email
info@jobsdone.pro
LinkedIn
Jobsdone on LinkedIn

Questions

Contract questions

Can we use our own contract?

Yes. Send it over and we review it. If it covers the terms on this page, we sign your paper; if your lawyer wants different wording for the same protections, we discuss it. If you have no contract of your own, we send ours.

Which law governs the contract?

default governing law and the alternatives we accept

Who owns the code and the IP?

You do, from the first commit. We work in your repository and your accounts, and the contract assigns the IP to you in the present tense, not at some later date.

Who will actually work on our project?

The engineers named in the proposal, and you meet them before you sign. A key-person clause means nobody is swapped without your written consent.

How do time zones work for a UK or US team?

We work on Lisbon time, which is the same clock as London: Mon–Fri, 08:00–18:00 UK time. That leaves about four working hours a day in common with the US East Coast. You get a demo of working software every week and a short written update every working day.

What contracts do you sign?

A master services agreement with a statement of work for each project, or your own paper if you prefer. A mutual NDA before we see anything, and a GDPR data processing agreement. US clients get a W-8BEN-E from us. Which law governs the contract is answered on Contracts & security.

How do we pay?

The fixed-price first step is paid upfront. Builds are billed by milestone, after you have seen the work running. Monthly care, if you want it, is billed at the start of each month. We invoice in euros, pounds or dollars.

Free 30-minute call

Tell us what has to work, and by when

You talk to an engineer who would work on it, not a salesperson. You leave the call knowing what it would take and what the first step costs, or we tell you that you don't need us.

Or write to us
info@jobsdone.pro
Lisbon time: the same clock as London, 4–5 hours ahead of New York

We answer within one working day. We sign an NDA before seeing any code.

Thank you, it's with us

An engineer will reply within one working day with a few times for the call. If it's urgent, email info@jobsdone.pro.