Committee document

The CIO’s vendor-risk questions, answered

The four questions a CIO asks about a migration vendor, with Novuz’s answers and the same questions to put to any other vendor. Counsel should check the answers against the contract.

What it holds

What does the vendor hold of ours?

Nothing, when Novuz runs inside your environment, which is the default. Code, data, lineage, reports and logs stay in storage you control. For an assessment, code shared under NDA is deleted 30 days after the readout unless an engagement follows; if you run the discovery container yourself, nothing is shared.

What stops

What stops if the vendor stops?

New conversion stops. What has been delivered keeps running: the converted code is native to your target, with no Novuz runtime in it, and the reconciliation reports and approval logs are already in your storage. Escrow of the conversion software and rules is offered in the First Domain charter.

What we own

What do we own, and from when?

The converted code, the reports and the logs, from the moment each is produced, not on final payment.

Change of control

What happens on a change of control?

Delivered code and evidence are unaffected, because you already own and hold them. For work in progress, the protection is in the contract: the escrow release events, assignment terms and the fixed price for agreed scope. Have counsel check that the release events cover a change of control.

Any vendor

The same four questions, for any vendor

QuestionA good answerA weak answer
What do you hold of ours?Nothing by default; stated deletion terms for anything sharedCode processed in the vendor’s cloud with no deletion date
What stops if you stop?Only new work; delivered output runs without youOutput that needs the vendor’s runtime or license
What do we own, and when?Everything produced, from the day it is producedOwnership on final payment
What happens on a change of control?Escrow with stated release events; assignment termsNo answer, or “nothing changes”

Below the document

Where to read next

Print or save this page as the document. Every figure in it is one the reader can check on the linked pages.

FAQ

Frequently asked questions

What happens to our pipelines if the migration vendor goes out of business?

With Novuz, they keep running. The converted code is native to your target with no Novuz runtime, and the reports and logs are in your storage. Escrow of the conversion software and rules is offered in the First Domain charter.

Who owns the converted code?

You do, from the moment it is produced, along with the reconciliation reports and approval logs.

How we measure: Methodology

Last reviewed:

Find out what your logic debt is costing you.

Every object counted, lineage, dead code and a fixed price in three business days. $3,000, credited.

Take the logic debt scorecard

Not sure which door? The scorecard takes ten minutes and tells you.

Scorecard