Which agreements are signed, and when?
Every commitment below is in place before any brand document, sample or login is shared. That means a mutual NDA, a data processing agreement and the transfer terms your country requires. Access is kept to the least needed, on your own accounts. Certifications are listed only when they are held.
Confidentiality — a mutual non-disclosure agreement (NDA), signed before any brand document, sample or account credential is shared with anyone.
Data processing — an agreement (DPA) with processor terms under Article 28(3) of the GDPR and the equivalent national law, for any personal data that appears in a brief or a sample.
International data transfers — standard contractual clauses or the transfer instrument your jurisdiction requires, signed before personal data moves.
Access — your AI accounts and workspace, on your seats, with least-privilege roles; no copies of your content in ours.
Certifications — listed only when held; none are claimed on this page or in any proposal.