This page summarises how we work. Where it describes our obligations, the Master Services Agreement is what binds us. We have written it down so you do not have to ask, and so your legal and security people can check us before the first commercial conversation.
The company details below can be checked on public record (ASIC and the ABR). The insurance certificate is available to procurement on request.
A plain English summary of the IP clauses in our Master Services Agreement. Assigned to you on payment. Where this summary and the agreement differ, the agreement applies.
Anything we bring to the engagement that already existed before the project starts, such as our internal libraries, methods and templates, stays ours. The contract calls these Background IP. You get a permanent licence to use them inside your product. Open source stays under its existing licence.
You own what we build for you once it is paid for. Each part is assigned to you as it is paid for in full, and until then you can see and test the code while we build. After launch we may show non confidential screenshots in our portfolio unless you tell us not to.
No phone home telemetry to our infrastructure. No hard coded API keys that route through us. No "you can only deploy this if we host it" architecture. Nothing we build depends on us to keep running. Once your final payment is made, you can run it without us.
Your hosting, domain, app store and payment accounts are set up in your name before launch, once the amounts due are paid. The full repository, final logins, accounts and deployment details are handed over after the final payment.
This page summarises how we work. Where it describes our obligations, the Master Services Agreement is what binds us. We build security to fit your risk: not gold plated, and not left exposed. An independent penetration test by a specialist firm is your choice, and we can help you arrange it.
The questions procurement asks about AI: where data is processed, whether it trains anyone's model, and how AI is used in our own delivery. See also our guide to data residency vs data sovereignty.
Engagements handling personal information of Australian individuals are designed to the Australian Privacy Principles (APPs) under the Privacy Act 1988. Whether your specific use case triggers APP entity status is a call for your privacy counsel. We build as though the Australian Privacy Principles apply.
We can host your data in Australian cloud regions. If your data must stay in Australia, tell us before you sign and we write it into your Schedule of Work.
Some software development may qualify. Whether yours does, and what it is worth, is a question for a registered R&D tax agent. Our accountants at Crescendo can advise; they are a separate practice and you engage them directly. We keep build records your tax agent can ask for.
If you have European users, we can scope GDPR features into your build, such as data subject requests, consent management and deletion requests. Your lawyer confirms what applies to you.
An honest note. Our founder has been shipping software since 2019 and running All Webbed Up as a Sydney marketing and development agency since 2021. AWLabs itself launched in mid 2026 as a new company, a partnership with a group of exceptional developers and founders. We have deliberately not stamped this site with certifications we have not earned or badges we cannot produce on request. If something on this page matters to your procurement process and we have not addressed it, ask us directly at admin@awlabs.com.au, we will tell you yes, no or "not yet" without dressing it up.