How do companies protect codebase and IP when hiring offshore developers?

1. Sign a comprehensive NDA and IP assignment agreement before granting any repository access. 2. Apply role-based access controls - developers should only access codebase components relevant to their assigned tasks. 3. Enable audit logging on all private repositories to monitor code access and changes. 4. Limit access to staging environments. Production access requires explicit client approval. 5. Include clauses on IP ownership in the service contract confirming that all developed code belongs to the client from the point of delivery.