Contracting

Contracting entityNamed in the MSA.
Master services agreementStandard MSA with a one-page SOW per project. Available on request.
Data processing agreementStandard DPA, including standard contractual clauses where needed. Available on request.
NDANDA first, always. We sign yours or send ours before any non-public information is shared.
Intellectual propertyYou own all deliverables: code, data, models and reports.

Data protection

  • We process clinical data as a processor under your instructions, as set out in the DPA.
  • We work with pseudonymized data. We do not need, and ask you not to send, directly identifying information.
  • Retention: data are kept for the project and up to 24 months after it, then deleted. We delete them earlier on request.
  • Client results are never published or used in marketing without explicit written permission.

Quality and audits

  • Every project follows the same documented workflow: MAP, logged runs, independent re-execution, sign-off, MAR. Verification by construction.
  • We accept sponsor audits, on site or remote, with 4 weeks' notice. SOP summaries on request.

Information security

A completed security questionnaire is available on request.

AI and data handling

Where agents and data liveOn our own access-controlled servers. The agents are custom-built for pharmacometric work.
External AI servicesClient data is never sent to external AI services or third-party model APIs.
Training on client dataNever, for any model.
LoggingEvery agent action that touches project files is logged and kept with the project record.
Opt-outAI processing can be switched off for sensitive projects; the timeline may be longer.
What agents never doGenerate model results, make scientific decisions or sign deliverables. Where AI fits, and where it does not.

Need a document for vendor qualification?

Tell us what your procurement or QA team needs. We sign your NDA first.