Compliance

Compliance Overview

This page summarizes how I, Thomas Boldt, operating as Boldt Engineering, handle client data, confidentiality, and engagement terms. It is a plain-language overview, not a contract. For specific obligations, contact [email protected].

Direct principal engagement. There is no account layer, no bait-and-switch staffing, and no offshore hand-off. I'm the engineer you scope the work with, and I'm the one who delivers it.

1. Confidentiality & data handling

Engagements routinely involve access to legacy source code, production credentials, architecture documentation, and other sensitive client systems. I handle this material under mutual NDA and only use it to perform the requested engagement. Access is limited to what the engagement requires and is not retained beyond the term of the work unless the client directs otherwise.

2. Regulated-environment experience

My prior engagements span healthcare claims processing (Change Healthcare), banking (Federal Reserve Bank of San Francisco, BankUnited, VISA), and public sector (NASA, South Florida Water Management District), performed as a senior engineer or architect at those organizations prior to founding Boldt Engineering. I'm accustomed to operating within a client's change-control processes, audit requirements, and data-handling policies, and I adapt to the controls your organization already has in place.

3. Insurance & liability

Boldt Engineering carries professional liability and errors & omissions (E&O) insurance. Certificates of insurance are available on request as part of vendor onboarding or contracting.

4. Engagement structure

Work is structured under one of three models — Modernization Assessment, Retained Advisory, or Delivery Engagement (see the homepage for details). Specific data-handling, security, and compliance terms (SOC 2 questionnaires, background checks, VPN/access requirements, etc.) are addressed per engagement based on the client's own policies.

5. Your rights & requests

Questions about how a specific engagement will be governed — confidentiality terms, data residency, subcontracting restrictions, or security questionnaires — should be raised during scoping so they can be reflected in the engagement agreement.

6. Changes

I may update this overview from time to time and will revise the "Last updated" date above when I do.

7. Contact

Questions about confidentiality, insurance, or engagement terms: [email protected].