Security and Data Handling
Last updated 1 November 2026
How we handle client code, IP and data. This is a plain summary of our practice. The terms of any engagement are agreed in writing.
Confidentiality
We sign NDAs before discussing or starting client work.
Who owns the code and IP
For software we build for a client, the client owns the code and the IP, as agreed in writing.
The exception is our own products, such as StudyMate, ReviewAI, Tradzy and Sauda. Enerasoft owns those. If you use one of them as a service, you are using our product, not owning it.
How we use AI, and your data
Senior engineers review AI-assisted code, and a human approves every change.
- We use AI tools to help write and review code. Those tools do not get access to client data.
- Where a client wants AI inside their own workflow, client data goes to an AI model only if the client agrees to it.
- A client can opt out of sending data to AI models at any time.
Separate environments
If you want your work isolated, for example in its own environment, we can set that up. Tell us your requirements at the start and we will agree them in writing.
When an engagement ends
When an engagement is over, we delete the client data we hold.
Certifications
We do not hold formal security certifications at this time. If your organisation has security requirements or a review process, we are happy to work through it with you.
Questions
Write to hello@enerasoft.com and we will answer security questions directly.