For procurement

Working with an overseas vendor: what you need to know

Why this page exists

If you work in a public agency, bringing in an overseas vendor for social media and digital channel management raises questions long before anyone looks at the creative. This page answers the compliance and operational questions Mashrokit Digital is asked most during a procurement review, so you have them upfront rather than three weeks in.

Where your data lives

Our infrastructure runs in AWS US East (Northern Virginia). Every function, database and storage bucket we operate sits in that region — we hold no production infrastructure in Israel or in Europe. Chat automation runs on ManyChat, a US company.

In practice this means constituent data collected through a form or a chatbot we build for you stays inside US-hosted infrastructure. If your policy requires a specific region, a dedicated account, or an environment you control directly, that is a configuration question rather than a migration.

What still needs to be agreed per engagement: who holds administrative access, retention and deletion schedules, breach-notification terms, and whether analytics and chat platforms are acceptable subprocessors under your rules.

Who owns what we build

What we build for you belongs to you. Landing pages, chatbots, dashboards, tracking configuration — the code and the data are yours. If an engagement ends, they go with you, and nothing we built stops working because we stopped working together.

Some of our internal tooling is written with AI assistance. Anything that runs in a client environment is reviewed by a person before it ships, and we are glad to walk your security team through the code rather than describe it.

Comment moderation

We do not decide what gets removed from your channels. You do. Every account we manage runs on a written moderation policy set by you: what is hidden, what is escalated, what is answered, and what is left alone. We apply that policy and log what we did.

We know this matters more in the US than it does here. A government social account is a limited public forum, viewpoint-based removal is actionable, and comments and messages are public records subject to retention schedules and records requests. Our commitment is procedural: your policy, our execution, a documented trail. Where your counsel wants the policy tightened before we touch anything, that is the right order of operations.

What we do and do not do

Mashrokit Digital runs public-sector social media and digital channels — strategy, content, video, paid campaigns, community management, and chatbots.

When an emergency is under way, our role is the digital channel inside it: what gets published, at what pace, and how the comment stream is handled. Message authority stays with your communications office, and in a US context, with your joint information center.

Accessibility

Our own site ships with an accessibility layer — contrast, text sizing, link emphasis, and motion reduction.

We build to WCAG standards, and where an engagement calls for conformance documentation or an independent audit, we provide it as part of the deliverables.

Insurance and vendor documentation

Mashrokit Digital carries professional liability insurance. Certificates, entity details and standard vendor documentation are available on request.

Asking us something specific

If you are evaluating us and need something specific for a procurement file, ask directly. We would rather send a real answer than a brochure.