I am considering using an oversees developer in India (we are a small, UK based company) to help on an Ad Hoc basis with our development. I trust the developer due to their track record and reputation, that said, they will have access to a lot of client data when we start moving closer to roll out. In order to work on our systems they will need full access to this data on SQL server for limited periods.
What paperwork is correct and enforceable in your experience? Is an NDA enough?