Offshore hands, onshore data

The client is a Dutch insurer. The agency's developers are in Manila and Buenos Aires. The contract says claims data does not leave the Netherlands, and it means the bytes, not the people.

The client's containers run on a box in Amsterdam. The developers work inside them through URLs: a terminal, a code editor, a desktop, each rendered in a browser tab. Keystrokes go in, pixels come out. No repository clone on a laptop in Manila, no database dump for local testing, no VPN turning a developer's machine into an extension of the Dutch network.

When the engagement ends, the tokens are deleted. There is nothing to collect from the developers' laptops, because nothing was ever on them.