Frequently asked questions

Use the search field to filter across categories. If something material is missing, tell the desk—we add limitations on purpose, not by accident.

Scope

How do you decide what belongs in a fixed-scope diligence?

We anchor on transaction type, regulatory exposure, and the buyer's stated risk appetite. Workshops confirm assumptions before fieldwork begins. Anything that requires sustained product engineering after close is flagged as a post-close workstream rather than quietly absorbed.

Scope

Can you work without direct access to production systems?

Partially. We can start with architecture diagrams, change records, and staging environments. For material claims about scale or reliability, we eventually need read-only production telemetry or we downgrade confidence in writing.

Security

Do you perform penetration testing during a deal window?

Only under a separate, time-boxed scope with legal clearance. Most transaction questions are answered with architecture review, configuration inspection, and staging-based tests that avoid customer traffic.

Security

How do you handle sensitive personal data encountered in logs?

We minimize collection, redact where possible, and store excerpts in access-controlled workspaces. If we identify regulated personal data outside agreed scope, we pause and route the issue to legal counsel before continuing.

Commercial

Are published price bands commitments?

No. Ranges are informational and depend on depth, geography, and access quality. Executed statements of work contain the binding figures, assumptions, and change procedures.

Commercial

What payment cadence do you prefer?

We typically invoice milestone tranches aligned to workshops, interim readouts, and final delivery. For longer programs, monthly invoicing with caps is available. We do not operate automated checkout on this site.

Delivery

How are steering meetings structured?

We use a standing agenda: evidence received, decisions needed, risks accepted or escalated, and calendar impacts. Minutes are concise and distributed within one business day when possible.

Delivery

What if leadership disagrees with a finding?

We document the disagreement, attach supporting evidence, and offer alternative interpretations where data supports them. Our role is clarity, not unanimity.

Limitations

What will you not promise in a diligence report?

We do not guarantee transaction outcomes, post-close uptime, or absence of unknown issues. Sampling and access boundaries mean residual risk always exists; we describe it plainly rather than overstating coverage.

Limitations

Are findings legal advice?

No. Findings are technical and operational. Legal and regulatory interpretations remain with qualified counsel. We coordinate closely but do not substitute for them.