Security and data protection
Extra capacity. Your security standards.
Your engineers work inside the EU, on managed equipment, from a secure office network. Your code, data and IP stay yours.
How we keep your work secure
Security built into how your team works.
01
Managed laptops.
Company-managed laptops with disk encryption and managed updates. Your work is never done on personal devices.
02
Secure office network.
Your team works from our office in Ljubljana on a secured network, with access-controlled premises.
03
VPN and your access rules.
Access to your systems only through your VPN and the roles and permissions you set.
04
Named access, revoked on exit.
Every engineer has named accounts in your systems. When someone leaves the team, access is revoked and the laptop is returned and reset.
05
Your policies, applied.
Tell us your security requirements and we align the setup with them, including office-only work if that is what your rules call for.
06
Open to review.
Your security team can review the setup, request documentation and visit the office.
What we sign
In writing, before anyone starts.
Your legal team gets the documents it expects. Nothing starts until they are signed.
NDA with Topcode and with every engineer on your team
GDPR data processing agreement (DPA)
IP assignment to your company, in the main contract
Your own security annex, if you have one
EU home ground
GDPR applies by default, and your team works inside the EU. For companies outside the EU, we use the standard EU data-transfer mechanisms.
Certifications, honestly
Topcode does not hold ISO 27001 or SOC 2 certification today. We work to company IT security standards, align the setup with your policies, and open everything to your security team's review. If a certification is a hard requirement for you, tell us on the discovery call and you will get a straight answer.
Questions, answered.
In your systems. Your team works inside the EU, on managed laptops, from a secure office network in Ljubljana, and reaches your systems through your VPN and access rules.
An NDA and a GDPR data processing agreement as standard, plus your own security annex if you have one. IP assignment is part of the main contract.
Not today. We work to company IT security standards and align the setup with your policies. If a certification is a requirement for you, tell us on the discovery call and we will give you a straight answer.
Yes. Your security team can review our setup, request documentation and visit the office in Ljubljana.
They can when needed; the office is the team's home base. Tell us if your security requirements call for office-only work, and we agree the setup with you.
Access to your systems is revoked on their last day, and the laptop is returned and reset. For the whole team, the same applies at the end of an engagement, together with a handover of code, documentation and accounts.
You do. Your contract assigns all intellectual property your team creates to your company.
Tell us your security requirements.
We'll show you how your team would be set up, from equipment and network to access to your systems.
Prefer email? info@topcode.si