Controlled packet
- Matching individual-supplier and applicable tax documents
- Remittance instructions and sanctions declaration
- Current insurance certificates, when held
- Security and no-data-processing attestations
- Signed NDA and contract fallbacks
Procurement readiness
Classify the engagement before the questionnaire classifies it
A compact diligence surface for a fixed-scope, no-production-access advisory engagement. Controlled identifiers and signed forms are supplied as a matching packet.
Contracting supplier
Vikram Jha
Individual independent consultant
Tax resident in India
Invoices issued from India
Vikram Jha Advisory is the practice name, not a separate company or legal entity. Residential address and tax identifiers are supplied only in controlled onboarding and invoice documents; they are not published on this website.
| Control | Published position |
|---|---|
| Engagement classification | Fixed-scope professional advisory. No production operation, no ongoing managed service, no customer-data processing and no access to a critical system unless a signed scope explicitly says otherwise. |
| Security posture | Client-tenant first; least-privilege named access; MFA; encrypted transport; synthetic examples; no shared credentials; no confidential client material in public AI services. |
| Data processing | The default scope is designed so no personal data is processed. If a buyer requires a fallback DPA despite that scope, the no-data recital and permitted processing are documented rather than argued orally. |
| Subprocessors | None for advisory delivery by default. Hosting and analytics used by this public website are described separately on the privacy page and do not receive client work product. |
| Contract posture | Mutual NDA; client ownership of paid deliverables; bounded use of pre-existing methods; written change control; liability allocation proportionate to the fixed scope; no silent product recommendation. |
| Commercial mechanics | Fixed scope, mobilisation invoice on signature, a second invoice against delivery, and jurisdiction-specific tax or withholding language reviewed before execution. |
| Professional indemnity / E&O | Certificate and limit are not claimed publicly until a current COI is configured. |
| Cyber insurance | Certificate and limit are not claimed publicly until a current COI is configured. |
Related public controls
Public drafting baselines
These are reviewable starting points, not signed representations. Buyer-specific identifiers, evidence and counsel-approved language belong in the controlled packet.
Next step
Need the controlled packet?
Name the buyer, jurisdiction and supplier questionnaire. The matching documents should travel together so vendor-master, tax form and invoice cannot disagree.