Engagement governance
The details belong
in the agreement.
A project should be clear enough for procurement, engineering, and security teams to understand what is being commissioned and what is not.
- Scope and acceptance
- Research questions, deliverables, review milestones, exclusions, and acceptance criteria.
- Access and confidentiality
- Written authorization, approved environments, confidentiality terms, and evidence-handling arrangements.
- Data and AI use
- Agree which data and tools may be used. Sensitive client material is not input to external AI services without authorization.
- Commercial terms
- Fees, payment schedule, intellectual property, retention, and handover requirements agreed before work starts.