Legal

Scope. Each engagement has a defined scope agreed in writing before work starts. Scope changes require a new written agreement and may affect price and timeline.

Deliverables. Audit deliverables are a written report. Advisory deliverables are written reviews and a monthly summary. Implementation deliverables are source code committed to the agreed repository.

Payment. Payment terms are fourteen days net. Late payment interest follows Finnish law.

Confidentiality. Information shared during an engagement is treated as confidential. A separate non-disclosure agreement can be signed on request.

Liability. Liability is limited to the value of the engagement. turva.dev is not liable for indirect or consequential damages.

Intellectual property. The client owns the deliverables produced for them. Generic methods, templates and reusable code remain with turva.dev.

Governing law. Finnish law applies. Disputes are resolved in the District Court of Pirkanmaa, Finland.

Server logs. The hosting provider (Cloudflare) records standard request logs including IP address, user agent and requested path. Logs are retained according to Cloudflare's standard retention policy.

Email. Email communication is stored in standard email infrastructure for as long as needed to deliver the work and meet accounting obligations under Finnish law (six years for invoice records).

Client data. Data shared by a client during an engagement is stored only on systems necessary to deliver the work, and deleted within thirty days of engagement closure unless retention is required by law.