Question 1

Do you sign NDAs before discovery calls?

Accepted Answer

Yes. We're happy to sign a mutual NDA before any discovery call or technical discussion. If your organisation has its own NDA template we'll review and sign it; otherwise we can provide ours. Sensitive requirements, data, and commercial details are protected from the very first conversation.

Question 2

Are you on any government procurement frameworks?

Accepted Answer

We deliver for public-sector and regulated clients both through direct contracts and via established procurement routes. Framework availability changes over time, so please contact our team and we'll confirm the most appropriate purchasing vehicle for your department and the current options that apply to your procurement.

Question 3

What Professional Indemnity Insurance do you hold?

Accepted Answer

We carry Professional Indemnity, Public Liability, and Employer's Liability insurance appropriate to enterprise and public-sector engagements. A current certificate of insurance, including cover levels, can be provided on request as part of your due-diligence process.

Question 4

What is your data residency policy for NHS and government data?

Accepted Answer

For NHS and government engagements we can host and process data within UK data centres to meet UK data-residency requirements, aligned to UK GDPR and the NHS Data Security and Protection (DSP) Toolkit. Processing locations, access controls, and data-handling responsibilities are agreed and documented per project before any data is handled.

Question 5

Can you provide references from government or regulated-industry clients?

Accepted Answer

Yes. We can provide references and relevant case studies from clients in government, healthcare/NHS, and other regulated sectors — shared on request during evaluation or procurement, subject to client confidentiality and any NDAs in place.

Question 6

Do you have experience with IR35 and UK government procurement rules?

Accepted Answer

Yes. We typically engage as an outside-IR35 supplier delivering defined project outcomes against a statement of work, rather than supplying labour, and we structure engagements accordingly. We're familiar with UK public-sector procurement principles — fair, transparent, and fully documented — and can work within your department's processes.

Question 7

What certifications are relevant to government work?

Accepted Answer

The standards most relevant to public-sector delivery include ISO 27001 (information security), Cyber Essentials and Cyber Essentials Plus, UK GDPR alignment, and the NHS Data Security and Protection Toolkit for health data. We can share our current certification status and supporting documentation on request.

Question 8

How do you handle security vetting for sensitive projects?

Accepted Answer

For sensitive work we can put the relevant team members through the appropriate level of security clearance (for example BPSS or SC) where required, alongside background checks, signed confidentiality agreements, least-privilege access, and full audit logging. Vetting requirements are confirmed with you before the team mobilises.

Question 9

What is a typical enterprise project timeline?

Accepted Answer

It depends on scope, but a typical enterprise engagement runs in phases: discovery and architecture (around 2–4 weeks), iterative design and build in sprints (3–6+ months depending on complexity), then testing, security review, and deployment. You receive a detailed delivery plan with milestones during scoping so timelines are clear from the outset.

Question 10

Do you work alongside existing in-house tech teams?

Accepted Answer

Yes. We regularly augment and collaborate with in-house engineering, security, and product teams — integrating with your workflows, coding standards, ceremonies, and governance. We can lead delivery end-to-end, embed within your team, or provide specialist capability where you need it.

Question 11

What happens if a project exceeds scope?

Accepted Answer

Scope is defined up front in a written statement of work with agreed milestones. If new requirements emerge, we manage them through a transparent change-control process: we document the change, estimate its impact on cost and timeline, and proceed only with your written approval — no surprise billing.

Question 12

Do you have GCC and Saudi Arabia references?

Accepted Answer

Yes. We support clients across the GCC, including Saudi Arabia and the UAE, and can provide regional references and case studies on request, subject to confidentiality. We're familiar with regional data, localisation, and compliance considerations and align delivery to local requirements.

IK Group of Companies

Request a Consultation

Delivering Enterprise Technology Since 2020 | 100+ Clients | 3 Global Offices
Born digital, built for scale

Building Visions,
Showcasing Excellence.

Skills Bridge

Layan

Pathway

Miraj

Propertera

NF Fitness App

Cross-Border Gifts

Strike Ecommerce

Adab Food Ordering

Trusted by Industry Leaders.

Industry-Leading Certifications

Mobile Applications That Scale

What Our Happy
Clients Say About Us

Frequently Asked
Questions