Engineering quality
The practices below come straight from what safety and certification standards expect, so we apply them by default rather than only when a contract asks.
Requirements traceability
Requirements are linked to design, code and tests, so coverage gaps show up before an assessor finds them.
Reviews
Plans, designs, code and test specifications are peer reviewed against checklists, with findings recorded and closed.
Configuration management
Baselines, change requests and release records under version control, so any delivered item can be rebuilt.
ASPICE-aligned process
Work products and practices aligned with ASPICE process areas such as SWE.1-SWE.6 and SUP.8-SUP.10.
Information security practices
- NDAs signed before any technical information is exchanged, and confidentiality obligations in every engineer's employment terms.
- Least-privilege access: engineers get access only to the repositories, tools and data their task needs, and access is removed when they roll off.
- Client-network segregation: client work runs on client-provided systems or on segregated environments, never mixed across accounts.
- Client-owned hardware, licences and data are logged, tracked and returned or destroyed as agreed.
- Export-control awareness: technical data subject to export controls is handled only under the client's instructions and applicable licences, and is never entered into AI tools.
- Security incidents are reported to the affected client promptly and handled under the agreed process.
This website
The site runs over HTTPS, keeps forms to the minimum fields needed and does not ask for sensitive personal data. Analytics and session tools run only as described in the cookie policy, and personal data is handled under the privacy policy. Our approach to AI tools, including the site's assistant, is on the responsible AI page.
Certifications
Certifications held by Stalwart Innovations are listed on this page once confirmed. Until then we describe the practices we follow rather than claim a certificate. If your supplier assessment needs specific evidence, contact us and we will answer the questionnaire directly.
Frequently asked questions
Will you sign our NDA before we share requirements?
Yes. We sign an NDA before any technical information is exchanged, and we are happy to work on your template. Every engineer is also bound by confidentiality terms in their employment contract.
How do you stop client information leaking between accounts?
Client work runs on client-provided systems or on segregated environments, access is granted per engineer on a least-privilege basis, and it is removed when the engineer leaves the engagement. Engineers do not move material between accounts.
Do you use AI tools on client code or data?
Not unless the client has approved a specific tool and use in writing. Client code, data and anything export-controlled are never entered into public AI services. Our wider position is on the responsible AI page.
Can you fill in our supplier security questionnaire?
Yes. Send it through the contact page and we will answer it directly, including how access, devices, data handling and incident reporting work on your engagement.
Talk to an engineer, not a call centre. We reply within one business day.