How we're structured and certified.

ISO/IEC 27001:2022 Certified

LegelpTech Outsourcing Private Limited holds a current ISO/IEC 27001:2022 certification covering the information security management system applied to staff augmentation services, recruitment, onboarding, deployment, and management of technical and non-technical personnel for client projects.

Standard

ISO/IEC 27001:2022

Issued

03 September 2025

Valid Through

02 September 2028

Scope

Information security applied to staff augmentation services, recruitment, onboarding, deployment, and management of technical and non-technical personnel for client projects.

Surveillance audits are scheduled annually. A copy of the certificate is available to clients on request via contact@zedtreeo.com.

Contracts & Invoicing

All client contracts, master service agreements, statements of work, and invoices are issued in the name of LegelpTech Outsourcing Private Limited unless otherwise agreed in writing. Legelp Services LLC serves as our registered US presence, operating under the registered trade name “Zedtreeo”; certain engagements may be contracted through it, as agreed in writing. By default, clients sign one master agreement with LegelpTech; we run the operational stack — payroll, taxes, equipment, IP assignment, and compliance — underneath. For US clients: you don’t 1099 your specialist — billing runs company-to-company on one monthly invoice, and a W-8BEN-E is provided on request. Where an engagement is contracted with Legelp Services LLC as agreed in writing, a W-9 applies instead. Confirm specifics with your tax advisor. The IRS rules behind this are walked through in our guide to 1099s and W-8BEN-E for offshore contractors.

Secure Workflows & Access Controls

Our information security management system is built around the controls required by ISO 27001:2022. Practical commitments include: encryption in transit (TLS 1.2+) and at rest; role-based access controls; least-privilege provisioning; secure-device workflows for client systems; documented incident response procedures; and regular internal audits. Sensitive client data is processed only on authorized systems by named, NDA-bound personnel.

NDAs & Confidentiality Framework

Every Zedtreeo engagement is protected by a mutual non-disclosure agreement signed before any client data is shared, and every member of the LegelpTech delivery team is bound by individual confidentiality obligations through their employment terms. Confidentiality survives engagement termination. Sub-processor relationships are governed by equivalent contractual protections.

Client IP Ownership

All work product created by Zedtreeo specialists during a client engagement — code, content, designs, reports, datasets, and derivative work — is assigned to the client at the moment of creation. There are no escrow holdbacks, license-back clauses, or shared-IP arrangements. IP assignment terms are codified in the master service agreement and reinforced by individual contributor IP transfer clauses.

Employment, Payroll & Cross-Border Compliance

LegelpTech Outsourcing Pvt Ltd legally employs the professionals placed through Zedtreeo, manages payroll, withholds applicable taxes, and maintains compliance with Indian labour law (Shops & Establishments Act, Payment of Wages Act, Provident Fund, ESI where applicable). Cross-border engagements operate under contractor-of-record terms appropriate to each client jurisdiction; we do not engage clients in employment-of-record arrangements unless explicitly contracted.