Who directs the work
CG Tech directs the work and manages and replaces the professionals. The client sets goals, priorities and acceptance criteria. This split is described in the contract.
Security, LGPD and contracts
What procurement, legal and information security need to know before approving an engineering vendor.
Roles under the LGPD
Under the LGPD (Brazil's data protection law), the client is usually the controller of personal data in our projects and CG Tech acts as the processor, handling data only according to the client's instructions. The roles for each project are recorded in the contract.
Data processing agreement
Every contract includes a data processing agreement (DPA) covering purpose, security measures, sub-processors and incident procedures.
Security incidents
If an incident involves client data, we notify the client within the timeframe set in the contract, so the client can meet its obligations to the ANPD (Brazil's data protection authority).
Confidentiality and intellectual property
Confidentiality agreements with the company and with each professional. Ownership of the code developed is defined in the contract.
Use of AI
Approved AI tools are listed in the contract as sub-processors when they handle client data. Client data and code do not train models.
Policies
Documents available on request while the public version is being finalized.
- Information security policy
- Continuity policy
- Privacy policy
- AI usage policy
- Code of ethics
Map your team’s continuity risks
You leave the conversation with a risk map, even if you don’t hire CG Tech.
We reply to the email address you provide.