Where the work is done is a contract decision — not ours.
Every engagement is structured around the clauses and data rules in your contract. Onshore, nearshore or hybrid delivery — but only where your contract allows it.
Three ways to structure delivery.
Onshore
US-based program management and US-based delivery for work that requires US persons, US data residency or on-site presence.
Hybrid
US program management and client-facing roles, with defined work packages performed by our delivery partner where the contract allows.
Nearshore EU
For commercial clients and European-market work: delivery from the aLIVE group’s certified sites in Germany and Romania under GDPR.
What we check before we bid.
- Place of performance and any restrictions on offshore work or foreign access to data.
- Data classification, hosting location and security requirements (for example NIST SP 800-171 for controlled unclassified information).
- Limitations on subcontracting for small-business set-asides (13 CFR 125.6, FAR 52.219-14).
- Accessibility requirements for digital deliverables (Section 508, WCAG 2.1 AA).
- Personnel requirements such as background checks, clearances or citizenship.
We only claim what we hold.
Certifications, authorizations and past performance are listed exactly as they are — and attributed to the company that holds them.
Five ISO certificates held by our delivery partner, not by Vella
Vella holds no FedRAMP authorization of its own
Vella holds no CMMC certification of its own
Partner references are labeled as partner experience
