A: Several options are possible<br><br>

a.) All communication of the server could be monitored e.g. using an external system that analyses all the network traffic. This would show any possible connections from the system to Gamma or the other way round. <br><br>

b.) The customer has also the possibility to come to Munich office for 2-3 weeks and do a source-code review to ensure that no backdoors are inside the software. He could then compile it himself there and take the executables with him. Due to the fact that gamma publishes quarterly updates, this process is not really efficient as with every update it would need to happen again and the updates have to be installed to ensure continuous functionality and anti-virus bypassing.<br><br>

c.) All encryption certificates that are used to encrypt all files, communications and also control access, are generated by the customer during the installation. Even when using the same software, Gamma would not be able to access the system because they do not have the correct RSA encryption keys.<br><br>

d.) After the installation, the customer can change all IP addresses of server, proxies, etc. and therefore ensure that Gamma has no knowledge of the location, addresses, etc... <br><br>

e.) Gamma is an independent company that is not bound to any country, governmental organisation, etc. Being able to spy on customer systems would not just destroy the company’s reputation but also bring it into serious legal problems.<br><br>