NDA, DPA, and SCCs. Ready to sign before you. send a line of your brief.
Mutual NDA, Data Processing Agreement, and Standard Contractual Clauses on request. We countersign inside 30 minutes during UK working hours.
The pack covers Empyreal Infotech Limited (London) as data processor, the sub-processor list, and UK, EU, and US data-flow language. Drafted by our solicitor, reviewed quarterly, procurement-tested at four FTSE 250 acquirers since 2024.
Three documents. Drafted by our solicitor. Cleared by FTSE 250 procurement four times.
You shouldn’t have to wait a week for a studio’s legal team to wake up before you can share a brief. One email, and the pack arrives ready to sign. Mutual NDA, GDPR-aware DPA, and SCCs for any data crossing a border.
0
30min
0
What you’re actually signing. And the one thing each document protects.
No 40-page master agreement to wade through. Three short documents, each doing one job. Here’s what’s inside the NDA pack, so your solicitor can scan it on a phone before the first call.
The mutual NDA
Mutual non-disclosure under UK law. Two-year term. Standard mutual carve-outs. Both sides protected the same way, so there’s nothing buried that only covers us.
The DPA
A UK and EU GDPR-aware Data Processing Agreement with Empyreal as your processor. The versioned sub-processor list rides along: AWS, Cloudflare, Stripe, Vanta, and our observability tools, updated quarterly.
The SCCs
Standard Contractual Clauses for any data crossing a UK, EU, or US border. Module 2, controller to processor. The language your DPO needs to clear a cross-border flow without a fresh legal review.
The procurement extras
On request: a pre-filled SIG-Lite and CAIQ, plus our SOC 2 Type II report (achieved December 2025). Enough to answer most of a 60-page security questionnaire from the first reply.
Six things your CFO, CTO, and DPO can point to
The questions a careful buyer asks before sharing a codebase. Each one answered in the pack, not in a sales call.
IP assigns on every commit
Stated explicitly in the engagement letter that follows the NDA. You keep everything. No “our framework” clause hiding in the contract.
Signed DPA + SCCs on file
UK and EU GDPR-aware Data Processing Agreement. SCCs for cross-border. The sub-processor list versioned, so the next review clears in days.
SOC 2 Type II achieved
Empyreal-internal SOC 2 Type II achieved December 2025. Held pen-test report. Vanta evidence live, shared on request.
30-day walk-away both ways
You keep everything. No lock-in. Two handovers in seven years, both inside 48 hours, both clean.
DSAR runbook + erasure
A 30-day DSAR response you can defend. Right-to-erasure at the schema. ICO audit-defendable, not a promise on a slide.
No-poach for agencies
White-label friendly. We add a 12-month mutual no-poach when an agency refers an engagement. A standard request, not a negotiation.
One email. The PDF, inside the hour.
However your buying process works, there’s a route here that fits it. None of them needs a call first.
- 01
“I need to see your NDA before I can share anything.”
Email mohit@empyrealinfotech.com with the subject “NDA pack”. The PDF arrives inside one hour during UK working hours. No form, no funnel, no “a team member will be in touch.”
- 02
“I’d rather just tell you the problem and sort paperwork after.”
Use the contact page and give us a one-line summary. We’ll attach the NDA pack to our first reply, so the legal step and the conversation start together.
- 03
“Everything has to go through our procurement portal.”
Coupa, SAP Ariba, or Workday Procurement. Send the portal link and we upload the pack into your system. We’ve done it for four FTSE 250 procurement teams.
- 04
“I need it signed by both sides before my board call.”
Sign it, and we countersign inside 30 minutes during UK working hours. Same-day signature on most engagements. The countersigned PDF lands back in your inbox.
- 05
“I want you to read my code before I explain it.”
We can sign before you say a word about the work. Read-only Git access works fine under this NDA. You share the repo, we read it, the conversation follows.
What legal and procurement actually ask
Direct answers. No marketing fluff.
Yes. We accept your NDA template as long as it’s mutual, under UK or EU law, with reasonable carve-outs. We countersign inside the day, usually inside 30 minutes during UK working hours. Send it as an attachment and we’ll review it before the first call.
An external UK solicitor, reviewed quarterly. It’s been cleared by procurement teams at four FTSE 250 acquirers across 2024 and 2025. The DPA names Empyreal Infotech Limited as your processor and ships with a versioned sub-processor list.
Yes. A pre-filled SIG-Lite and CAIQ ship with the NDA pack on request. Our SOC 2 Type II report, achieved December 2025, is included on request too. Between them they answer most of a standard 60-page security questionnaire from the first reply.
The DPA is UK and EU GDPR-aware, and the SCCs (Module 2, controller to processor) cover any data crossing a UK, EU, or US border. We don’t train models on your data, ever. If we use an AI tool on your code, you approve the tool list in writing first.
Yes. We add a 12-month mutual no-poach when an agency refers an engagement. It’s a standard request, not a negotiation, and we’re white-label friendly throughout the build.
IP assigns on every commit. It’s stated explicitly in the engagement letter that follows the NDA. You keep everything, your code lives in your GitHub org from the first commit, and there’s no “our framework” clause hiding anywhere.
The pack costs £0 to request, sign, and receive, so it’s never the bottleneck. Email Mohit with “NDA pack” and the PDF lands inside an hour. Once you sign, we countersign inside 30 minutes during UK working hours, and read-only Git access works fine under this NDA from that point.
Yes. Every engagement carries a 30-day walk-away clause both ways, with a written handover at the end. Two handovers in seven years, both inside 48 hours. You keep everything, with no lock-in.
See it in context.
A look at the kind of nda download surface we hand over — real screens, real data, documented and yours from day one.
One subject line. PDF inside the hour.
Or just send the 5-line brief and we’ll attach the pack to our first reply. Either way, you read it on your phone, your solicitor signs off, and we countersign inside 30 minutes during UK working hours.
- < 1h
The pack arrives.
NDA, DPA, and SCCs as a PDF, in UK working hours. SIG-Lite and CAIQ on request.
- You sign
We countersign in 30 min.
DocuSign, your portal, or email. Same-day signature on most engagements.
- Then
Read-only access, the work starts.
Share the repo. We read it under NDA. The conversation follows, with the paperwork behind you.