Skip to content

FAQ

Our legal documents are drafts pending counsel review

How an engagement runs, how payment works, who owns the work, and how your data is handled. Open a question for the full answer.

Working with us

  • How does an engagement run?4 stages: Specification, Your review, Build, Acceptance and training.
    1. Specification (1–2 weeks). We write the complete specification: every requirement, and the test that proves it is delivered.
    2. Your review (At your pace). You read, question and approve the specification. If you stop here, you keep it and owe nothing more.
    3. Build (Set in your specification). We build to the approved specification and show progress as it lands. A Launch-tier product typically takes 4–5 weeks.
    4. Acceptance and training (About 1 week). You run the acceptance tests in the specification, we train your team, and support begins.
    Link to this question
  • What if we change the scope?How a change to the agreed scope is handled.

    Any change to the agreed scope needs a separately signed, written change order before work starts. Two design-revision rounds are included.

    Link to this question
  • What do you need from us?What we need from your side during the project.

    Your decisions and materials gate the schedule: one named approver, your content and brand assets, and vendor accounts in your name. Waiting on them pauses the schedule, never the price.

    Link to this question
  • What don't you build?The kinds of work we turn down.
    • Brand identity and logo design
    • Writing your content
    • Filming and editing, unless you add media work to the request
    • Legal, tax or compliance advice
    • Moderating your community
    • Buying or managing advertising
    • Anything the approved specification does not list: new scope needs a signed change order
    Link to this question
  • How do we reach you?Email support@drivia.consulting, or use portal messages once a project starts.

    Email support@drivia.consulting, or use the messages in your client portal once your project starts.

    Link to this question

Pricing and payment

  • How do payments work?The build is paid in 3 milestones, then a monthly support plan.

    The build is paid in 3 milestones:

    • 33%: on signing — buys the written specification
    • 33%: on specification approval — build starts
    • 33%: on acceptance

    The support plan is then billed monthly. Invoices are due in 15 days. You can pay by card or ACH bank transfer, and there are no late fees.

    Link to this question
  • What do hosting and other services cost?Vendor services are passed through at cost, with no markup.

    They are paid to the vendors at cost, no markup (at cost plus payment processing). Your estimate shows the monthly range at launch and at your 12-month size.

    Link to this question
  • Why does Enterprise start at $300,000?Why Enterprise includes testing at launch-day scale.

    Because testing at launch-day scale is part of the job: QA at day-one scale: load at three times peak concurrency, formal acceptance testing with the client's testers, an accessibility audit, a disaster-recovery drill, a security review and a staged rollout.

    Link to this question

Ownership, licensing and legal

Data, privacy and security

We do not sell data, and the site has no third-party trackers or analytics.

  • How is our data kept separate and safe?Each client account is walled off in the database, backed up daily for 7 days.

    Every client account is walled off from every other one inside the database itself, not only in the app: a signed-in person can read only the accounts they belong to. Our staff sign in with a second factor, and every change to your records is written to a tamper-evident log.

    The database is backed up daily and the backups are kept for 7 days. Signed documents, certificates and invoice PDFs are also copied nightly to a separate private store and checked against their fingerprints. Our targets are to lose at most 24 hours of data (recovery point) and to be back within 4 hours (recovery time). These are targets, not a service-level guarantee.

    Links to your files are short-lived: a download link works for 60 seconds and is issued only after we check that you belong to the account.

    Link to this question
  • A software vendor we use had a data breach. What should we do?Check your legal notice duties, change exposed credentials, then question the vendor in writing.

    Start with what the law and your contracts require. Every US state, the District of Columbia, Puerto Rico and the Virgin Islands have laws requiring notice when certain personal information is breached, and your contract with the vendor may set its own notice duties and deadlines. If student education records were involved, the US Department of Education's Protecting Student Privacy site publishes a data breach response checklist. Your counsel can tell you which of these apply.

    Then close what the breach may have opened. Change the passwords and API keys your organization used with that vendor, and anywhere the same passwords were reused. NIST's digital identity guidelines advise against forced periodic password changes, but call for a change whenever there is evidence of compromise.

    Finally, ask the vendor in writing: what data was involved and whose, when it happened and when it was contained, who investigated it, what has changed since, and how they will keep you informed.

    Link to this question
  • How long do you keep our data?How long each kind of record is kept, and what a legal hold changes.
    • Signed documents, signatures and certificates: 7 years after completion or contract end.
    • Invoices and payments: 7 years.
    • Project files, screenshots and updates: 2 years after the project closes. We email you 30 days before, with an export.
    • Requests that did not go ahead: 1 year.
    • Copies of the emails we sent you: 90 days.
    • Data export files: 7 days.
    • Nothing is deleted while an account is under a legal hold.
    Link to this question
  • Can we get a copy of our data, or have it erased?Download your account's data or ask for corrections and erasure; we answer within 30 days.

    Yes. In the client portal, go to Account, then Privacy. An account owner can download a zip of the account's data (the link works for 7 days). Anyone can ask us to correct or erase their personal data, ask for a free paper copy of anything they signed (posted within 10 business days), or withdraw consent to electronic records. We answer within 30 days. Erasure keeps only what the law requires, such as the name and email on a signed contract.

    Link to this question

Still deciding?

See the tiers and what each one includes, or send a request and get an estimate range before you submit it.