Data & delivery boundaries

Data, access and delivery responsibilities.

Each engagement must establish data handling, access, intellectual property and operating responsibilities. The topics below guide that discussion; they do not constitute a certification or security assessment.

The data and environment

  • Identify the data involved, its classification and the uses the client is permitted to authorize.
  • Agree the development, testing and production environments, including the providers and connections involved.
  • Define access roles, approval responsibilities and when access should end.
  • Document applicable data-use, model-training, retention, return and deletion terms.
  • Set ownership and licensing for client materials, deliverables and reusable components in the agreement.

Application permissions and review

  • Specify what the application may read, create or change, and which actions require approval.
  • Agree review and escalation paths for uncertain output, missing information and failed operations.
  • Select evaluation cases appropriate to the application, including relevant access boundaries and failure conditions.
  • Define the release, change, logging and recovery responsibilities required for the operating environment.

Evaluate results against the requirement

A citation allows source review but does not establish accuracy. Evaluate outputs against representative cases, source quality and the consequences of errors. Report results with their method and scope. Site demonstrations use fictional data.

Keep initial discussions non-sensitive

  • Do not submit classified material, CUI, export-controlled information, source-selection-sensitive information or credentials through this website.
  • Establish the handling requirements and an approved route before sharing protected project materials.
  • Do not treat a website demonstration as a production system or a security control.
  • Confirm required qualifications and authorizations for the actual engagement.

Claims and qualifications

  • This site makes no certification, clearance, contract-vehicle or agency-endorsement claim.
  • Technology resale is subject to supplier authorization and transaction terms. No formal partner status is claimed.
  • Products are in planning. Demonstrations use fictional records and do not represent a released product.

Verify required evidence and qualifications before an engagement.

Contractual responsibilities

The agreement defines delivery, data handling, acceptance, support, liability and change management. Regulatory and procurement requirements are assessed for the project.

Using this website

The contact page lets you prepare and copy a draft. Online submission is not enabled. Keep inquiries non-sensitive.

Define the security requirements.

Describe the requirements without protected information. Agree an approved channel before sharing project materials.