Security posture,stated plainly.

1. Data handling & access control

Client data and project code are handled under the confidentiality terms of the signed NDA and engagement agreement. Access to client systems, repositories, and credentials is limited to the engineer working the engagement. Connections to client infrastructure use encrypted channels (HTTPS/TLS). No client data is shared with third parties outside the agreed project scope. This is not a certified compliance framework, it is how engagements are run in practice today.

2. IP ownership & NDA

Every engagement starts with a mutual NDA before any technical detail is shared. Intellectual property assignment on deliverables is part of the standard engagement terms: fixed scope, milestone billing, 30-50% upfront, and IP transfer to the client on delivery per the signed agreement.

3. Personnel & location

Engineering work is performed remotely from Venezuela and LATAM, under The Pezzuti Method, LLC, a Delaware, USA-registered entity. This is disclosed upfront to every prospective client, not a detail uncovered later in the process.

4. Compliance / sanctions screening

The Pezzuti Method supports standard counterparty and sanctions screening as part of client onboarding. This paragraph is a placeholder pending review by legal counsel and will be finalized before it is treated as a binding compliance statement.