# Executive Onboarding, International Compliance & Milestone Billing Pack
**Prepared for:** Supabase
**Target Stack:** Python, Kubernetes | **Squad Size:** 2 Engineers
**Jurisdiction:** Colombia | **Date:** 2026-10-27
**Reference ID:** `ONB-2026-2C73DE16`

---

## 1. Executive Summary & Legal Framework

This Onboarding & Compliance Pack establishes the legal, taxation, and operational rails for deploying a dedicated nearshore engineering squad in **Colombia** for **Supabase**.

The engagement is structured to deliver:
1. **100% IRS Tax Compliance:** Form W-8BEN (Individual) / W-8BEN-E (Entity / SAS) collection with **0.0% US withholding tax** under foreign source income rules.
2. **Ironclad IP Protection:** Full, irrevocable worldwide assignment of all patents, copyrights, and economic rights under Ley 23 de 1982 Art. 30 & Ley 1450 de 2011 Art. 28.
3. **Independent Contractor Safe-Harbor:** Clear operational separation safeguarding against employer reclassification under local labor law.
4. **Optimized Cross-Border Payment Rails:** Eliminating $1,500 - $3,500/yr per engineer in hidden bank FX and intermediary wire spreads.
5. **SOC-2 & Zero-Trust Remote Security:** Mandatory device encryption, 2FA, and strict secrets isolation.

---

## 2. United States Tax Compliance (IRS W-8BEN / W-8BEN-E)

| Dimension | Specification |
|:---|:---|
| **Applicable Tax Form** | `W-8BEN (Individual) / W-8BEN-E (Entity / SAS)` |
| **US Statutory Basis** | `Foreign Source Income — IRC § 861(a)(3) & § 862(a)(3)` |
| **Federal Withholding Rate** | **0.0%** (Zero US Tax Withholding Required) |
| **IRS 1099-NEC Reporting** | **Exempt** under Treas. Reg. § 1.6041-4(a)(1) |
| **Local Tax Identification** | `RUT (Registro Único Tributario) / NIT` |

> [!NOTE]
> **Legal Analysis:** Under Internal Revenue Code Sections 861(a)(3) and 862(a)(3), compensation for labor or personal services performed outside the United States is treated as income from sources without the United States. Because services are performed wholly outside US territory by non-resident foreign nationals / foreign entities, payments do not constitute US-source FDAP income. Therefore, no Chapter 3 withholding under IRC § 1441/1442 applies.

---

## 3. Latin American Labor Law & Intellectual Property Safeguards

### 3.1 Country-Specific Statute: Colombia
- **Local Contractor Framework:** Contrato de Prestación de Servicios (Código de Comercio Art. 864 & Código Civil Art. 1495)
- **Applicable IP Statute:** Ley 23 de 1982 Art. 30 & Ley 1450 de 2011 Art. 28

### 3.2 Intellectual Property Assignment Addendum
```text
Under Article 28 of Colombian Law 1450 of 2011 amending Law 23 of 1982, all patrimonial copyright and economic exploitation rights ('derechos patrimoniales de autor') in software, documentation, and work products are irrevocably and exclusively transferred to the Client globally in perpetuity. Contractor waives exercise of moral rights to the fullest extent permitted under Colombian jurisprudence.
```

### 3.3 Independent Contractor Safe-Harbor Protocol
```text
To prevent employment subordination reclassification under Article 23 of the Colombian Substantive Labor Code, Contractor exercises autonomous technical execution, sets their schedule within mutually agreed sprint overlap SLA windows, provides their workstation, and verifies independent payment of social security contributions (PILA).
```

---

## 4. Cross-Border FX & Payment Rail Economics

Traditional international SWIFT bank wires charge steep wire fees and impose hidden 2.5% to 3.5% foreign exchange markups. Using modern fintech rails saves thousands of dollars annually.

### Payment Rail Comparison (Annual Squad Volume: $211,200.00)

| Payment Rail | Type | Settlement Speed | Annual Fees | Annual FX Spread | Total Annual Friction | Annual Savings vs SWIFT |
|:---|:---|:---|:---:|:---:|:---:|:---:|
| **Traditional International Wire (SWIFT USD)** | Legacy Banking | 3 - 5 Business Days | $1,560.00 | $5,808.00 | **$7,368.00** (3.49%) | **$0.00** |
| **Wise Business (ACH / Local Rail)** | Fintech Direct | Same-Day / < 24 Hours | $20.40 | $950.40 | **$970.80** (0.46%) | **$6,397.20** |
| **EOR / Contractor Platform (Deel / Remote)** | Compliance Platform | 1 - 2 Business Days | $1,176.00 | $2,640.00 | **$3,816.00** (1.81%) | **$3,552.00** |
| **Digital Dollar Rails (USDC on Base / Polygon)** | Cryptographic Stablecoin | Instant (< 30 Seconds) | $3.60 | $1,267.20 | **$1,270.80** (0.6%) | **$6,097.20** |

> [!TIP]
> **Recommended Settlement Rail:** **Wise Business (ACH / Local Rail)**
> By utilizing Wise Business (ACH / Local Rail), Supabase preserves **$6,397.20/year** in wasteful banking overhead.

---

## 5. Milestone Invoice & Payment Terms

**Invoice Number:** `INV-2026-SUPA-E4750F`
**Issue Date:** 2026-10-27 | **Due Date:** 2026-11-26
**Payment Terms:** 2/10 Net 30 (Early Pay Incentive)

### Invoice Line Items
| # | Description | Hours | Rate | Total Amount |
|:---:|:---|:---:|:---:|:---:|
| 1 | Senior Python/Kubernetes Engineer #1 — Monthly Retainer Milestone (160h) | 160h | $55.00/hr | $8,800.00 |
| 2 | Senior Python/Kubernetes Engineer #2 — Monthly Retainer Milestone (160h) | 160h | $55.00/hr | $8,800.00 |

| | **Subtotal:** | | | **$17,600.00** |
| | **IRS Withholding (0%):** | | | **$0.00** |
| | **Total Invoice Due:** | | | **$17,600.00** |

> [!IMPORTANT]
> **Early Payment Incentive (2/10 Net 30):**
> If settled on or before **2026-11-06**, a **2.0% discount** of **$352.00** is applied, reducing the balance to **$17,248.00**.

---

## 6. SOC-2 Remote Security & Device Protocol

| Domain | Mandatory Security Requirement | Verification / Audit |
|:---|:---|:---|
| **Endpoint Security** | Full-disk AES-256 encryption enabled (FileVault on macOS, BitLocker on Windows, LUKS on Linux). | Cryptographic status audit upon onboarding. |
| **Identity & Access** | Mandatory enterprise password manager (1Password) + Hardware/Authenticator 2FA on all repositories and cloud accounts. | Zero shared credentials; SSO integration where applicable. |
| **Network & Environment** | Zero-trust network access (Tailscale / WireGuard VPN); prohibition of open public Wi-Fi without VPN. | Dedicated encrypted tunnel to staging/production clusters. |
| **Data Confidentiality** | No production client customer data or PII downloaded to local workstations; ephemeral sandbox environments only. | Git pre-commit secrets scan (TruffleHog / GitGuardian) and clean disk audit. |
| **Offboarding Protocol** | Automated single-click access revocation & remote workspace wipe within 15 minutes of contract termination. | Centralized IAM de-provisioning runbook. |

---

## 7. Sign-off & Onboarding Execution

**For Client:**
Company: _____________________________
Authorized Signer: ___________________
Title: ________________________________
Date: _________________________________

**For Nearshore Partner:**
Entity: Technographic Radar Global Partner
Authorized Signer: ___________________
Title: Managing Director, LATAM Talent
Date: _________________________________