The pack, before you ask.
The public half of the vendor review, in one place. The rest is signed at contract.
Vendor profile
- LEGAL NAME
- Nimos Websites — a sole proprietorship
- LOCATION
- Kelowna, British Columbia, Canada
- WORKING WITH
- Clients anywhere; Pacific hours that overlap the US day.
- CONTRACT VEHICLES
- Your MSA, SOW, DPA or NDA. We sign yours.
- CURRENCY
- CAD or USD
- INVOICING
- PO number; bank transfer or card via Stripe. Terms in writing.
- TAX
- Sole proprietorship; Canadian tax resident. W-8BEN on request.
- INSURANCE
- Not held today; requirements raised before signature
The standard questionnaire
Where is data hosted?
Vercel site, Neon database. Region named in the signed terms.
Is data encrypted?
TLS in transit. At rest, by the providers.
Who can see client data?
The principal; clients through role-based portal access.
Do you hold SOC 2 or ISO 27001?
No. We answer your questionnaire directly.
Do you have insurance?
Not today. Requirements before signature.
Do you have an MSA or an SLA?
No standard MSA or SLA. We sign yours. One-business-day acknowledgement.
Do you use subprocessors?
Vercel, Neon, Stripe, Resend; Shopify when in scope.
What about backups?
Provider policies; confirmed in writing at setup.
What happens in an incident?
Acknowledge in one business day, contain, fix, log.
Can we take the work in-house?
Yes. Accounts, repository, domain, runbook, walkthrough.
Do you sign NDAs?
Yes — yours or ours, before the first call.
WHAT WE NEED FROM YOU
- NDA, if your process requires one.
- Your security questionnaire, or the standard one answered on this page.
- The contract vehicle — your MSA and SOW; we sign yours.
- A PO number and billing contact.
- A security contact for the life of the engagement.
One pass. We answer each step within one business day.
REFERENCES & PROOF
Five founder builds. No third-party client reference list yet — when there is one, it will be named with permission.
ASK FOR THE PACK
Ask for the pack, or attach your questionnaire. One reply, in writing.