Skip to content

Enterprise procurement

Straightforward to evaluate and buy

GoldAgent is built to be easy for a procurement, security or legal team to assess. The documents and process below are available on request, and we will work to your onboarding requirements.

What's available

The evaluation pack

  • Mutual NDA

    Signed before any sensitive detail is shared.

  • Scoping questionnaire

    To define systems, sites and depth precisely.

  • Testing authorisation & rules of engagement

    Naming targets, window, source and exclusions, with hosted-PBX right-party consent.

  • Statement of work

    Deliverables, timing, liability and fees in writing.

  • Data-handling notes

    What we collect, how it is protected, and retention.

  • Sample report

    See the deliverable before you commit.

  • Security-questionnaire support

    We will complete your vendor security questionnaire.

  • Retest & assurance terms

    How verification and recurring reassessment are handled.

The process

From first contact to signed engagement

  1. 1

    Enquiry & NDA

    Initial conversation under a mutual NDA where needed.

  2. 2

    Scope & authorise

    Agree the scope and the written authorisation to test.

  3. 3

    Proposal & SoW

    A statement of work with deliverables, timing and fees.

  4. 4

    Assess, report, retest

    Deliver the assessment, report and verification of fixes.

For regulated buyers

Where compliance is in play

  • Telephony that handles card payments can fall within PCI DSS scope
  • Independent assessment supports Cyber Essentials and insurance renewals
  • Evidence and retest status suit audit and board reporting
  • Data-handling is documented for your information-governance review

A note on legal review

Our engagement agreement, authorisation pack and data-handling terms are provided for your review. They are commercial documents, not legal advice, and both parties should review them before signature. We are glad to work with your legal team.

Request the procurement pack

Tell us who is evaluating and what you need. We will send the relevant documents and answer your security questionnaire.

Testing is only performed against systems you own or are explicitly authorised to test.