Frequently asked questions

RocketParts is a software engineering and security/compliance consultancy. We design, build, and operate software for our clients, and we help teams achieve and maintain compliance such as SOC 2 and PCI DSS. See our Services and Work.

We work as an embedded, senior team under a master services agreement (MSA) and statements of work (SOW). We're fully remote and typically work inside your environment and tooling, conforming to your conventions and policies. To start a conversation, use Talk to Us.

You do. We don't operate our own product, and we don't take ownership of your systems or data. Work we deliver is yours, and any data we access during an engagement remains under your ownership and control — we handle it under NDA/DPA and in conformance with your policies.

We maintain our own information security program (least-privilege access with MFA, quarterly access reviews, background checks, secure development with peer review, and continuous control monitoring) and we conform to each client's security policies when working in their environment. Found a vulnerability? See our bug bounty page or our security.txt.

Email hello@rocketparts.io or visit our Support page. Active clients should use their project team and dedicated channels for the fastest response.

Our website Terms of Service are published and kept current. We're a flat team of experienced people and we're often hiring — see open roles on our Careers page.