Is my business data safe with an outside developer?
August 23, 2026 1 min read
It is as safe as the access you granted. Give a developer their own named accounts, on your infrastructure, and revoke them at handover — then the answer stops depending on trust.
What good access hygiene looks like
Named accounts, never shared logins, so an audit log means something. Your hosting, your database, your repository — with the developer added, not owning. And a revocation on the day the project ends, done by you.
Working with real data
Sometimes we need it, because bugs live in real data and not in test data. When we do, we ask, we work on an anonymised copy where anonymising is possible, and we delete it afterwards. What we do not do is keep a copy of your customer list on a laptop indefinitely.
The NDA
Signed before the first call if you prefer, and we will sign yours rather than insisting on ours. A studio that will not sign one before hearing your idea is telling you something.
