Last updated: July 2026
Before you show anyone your cost data, you should know exactly how it will be treated. Our standard documents are short, mutual, and available before you commit to anything — read them first, sign only when you are ready. Requested documents are sent within one business day.
The mutual NDA
The NDA is mutual: it binds us exactly the way it binds you. It applies from the moment either side shares something non-public — typically before the savings check, and always before the secure document upload is opened for your cost exports.
It covers:
- Confidentiality in both directions — your cost data, architecture, and commercial terms; our methods, tooling, and findings.
- Purpose limitation — shared information is used to evaluate and deliver the engagement, nothing else.
- Survival — the NDA stands whether or not an engagement follows. If you walk away after the savings check, it still protects everything shared.
The DPA
The data processing agreement applies whenever we process personal data on your behalf — for example, cost exports or resource tags that contain user names or identifiers. Think of it as the GDPR Article 28 layer on top of the NDA.
It defines:
- Processing scope and instructions — what we process, for what purpose, and only on your documented instructions.
- Sub-processors — who they are, and your right to be notified before anything changes.
- Security measures — encryption at rest, access logging, least-privilege access, storage outside the public web root.
- Deletion and return — your data is deleted or returned when the engagement ends, and on request at any time.
Working under your own NDA? The one-way NDA
Some clients prefer their own NDA for their information — that is fine, and we sign it. When an engagement then proceeds beyond the initial assessment, we share how we work: our methodology, report and document formats, and commercial terms. For that we ask you to sign our short one-way NDA covering our side only. It never restricts your own results — the findings, figures, and recommendations about your estate are yours.
The counting-rules document
Also available: the counting rules that define how verified savings are measured — the baseline, the verification window on your real Azure invoice, and what is excluded, such as usage changes and provider price moves. Because our share is paid only out of verified savings, the counting rules are exactly what that share is measured against. You should see how “verified” is defined before anything starts — in writing, before you sign.
How to get the documents
- Unlock them on the page. On the NDA, DPA or one-way-NDA page above, enter your work email and the downloads unlock right there — the editable Word and PDF versions. Your access code is emailed to you as well, so you can come straight back next time.
- Or ask us directly. Email contact@valor-co.com and name the documents you want — NDA, DPA, the counting rules, or all three — and we will send them. (The counting rules are sent this way.)
Emailed requests are answered within one business day · Mon–Fri 08:00–17:00 CET.