What to put in the statement of work
Staff augmentation for digital transformation lives or dies here, and this is the part every competing guide replaces with the phrase choose an experienced partner.
Nine clauses to name explicitly
Named people, not headcount. The contract names the engineers, their seniority and their allocation. Headcount language lets a vendor send anybody.
A ramp expectation. Write down what productive means on your programme and by which week you expect it. An engineer who is not contributing by week three is a conversation, not a surprise.
Notice periods, both directions. Yours for ending the engagement, theirs for withdrawing a person.
Replacement terms. If an engineer leaves, how fast is a replacement in place, and who pays for the overlap while the new one ramps.
Substitution rules. No swapping a named engineer without your written approval. This is the clause that prevents the silent bench swap described further down.
Access and least privilege. Which systems, which data, which environments, and the fact that access is revoked on the last day rather than the month after.
Code and intellectual property ownership. Assigned to you as the work is created, not on final payment.
Knowledge transfer as a deliverable. Documentation, a recorded handover session, and a named internal engineer who receives it. If it is not a deliverable it does not happen.
Exit and transition. A paid overlap period, a list of what is returned, and who switches the access off.
How you pay sits across the notice and replacement clauses. Hourly, monthly and dedicated models behave differently when you need to scale down, and our guide to staff augmentation engagement models sets out what each one does to your flexibility and your invoice.
The clauses that changed in 2026
Three jurisdictions moved this year, and the changes land in your contract rather than in your digital transformation plan.
United Kingdom: joint and several PAYE liability
From 6 April 2026, where a worker is supplied through an umbrella company, PAYE and National Insurance liability is joint and several. The agency in the supply chain carries it, and the end client carries it where no agency is involved. Ask your vendor to describe the engagement chain for every person on your programme, in writing, and check whether any umbrella sits in it.
United States: immigration cost and risk
With the H-1B fee unsettled, name who bears immigration cost and risk. A contract that is silent on this leaves the argument for the quarter when the cost arrives.
European financial services: DORA Article 30
If you are a financial entity, augmented engineers are an ICT third-party arrangement, and Article 30 of the Digital Operational Resilience Act already tells you what the contract must contain. A complete description of the services. The regions or countries where the work and any subcontracted work happens, plus advance notice of any change to those locations. Whether subcontracting of a critical or important function is allowed, and on what conditions. Service levels with quantitative targets. Termination rights with minimum notice periods. For critical functions, unrestricted rights of access, inspection and audit, and an exit transition period during which the provider keeps delivering while you migrate.
That last list is worth reading even if you are not regulated, because it is a mature procurement checklist written by people who have seen these arrangements fail.
None of this is legal advice, and the rules differ by market. Take proper advice for each country you engage in.
Access, least privilege and the offboarding you will forget
Augmented engineers need real access to do real work. Give them exactly what the work requires, through your own identity system, with named accounts rather than shared ones.
Then write the offboarding down on day one, because nobody writes it on the last day. Which accounts get disabled, which tokens get rotated, which repositories lose a collaborator, who confirms it is done. Most organisations discover their offboarding gap during an audit, which is the expensive way to find out.
