Trust & Compliance
Plain-language answers to the questions enterprise and government buyers ask before signing the first SOW. If you need anything beyond what's on this page, write to legal@innovexagency.com.
The counterparty on every Innovex engagement is INNOVEX TECHNOLOGIES L.L.C, a limited-liability company registered in Dubai, United Arab Emirates. Use the following details for vendor onboarding, KYC checks, and invoice routing.
We sign mutual non-disclosure agreements before any conversation that touches sensitive material — unreleased products, M&A activity, regulated data, or confidential strategy. We're comfortable working from your standard NDA, your legal team's template, or a short mutual NDA we maintain in-house.
Every member of the Innovex team — full-time, contractor, and production partner — signs a confidentiality agreement on engagement that survives the end of the project.
Client assets, raw footage, brand files, and working documents are stored on access-controlled cloud infrastructure (Google Workspace, Frame.io, and project-scoped Dropbox folders) located in EU and Middle East regions. Access is granted on a per-project basis and revoked when the engagement ends.
Default retention is 90 days after final delivery. We'll delete working files sooner on written request, and we maintain master deliverables for a longer archive only if you ask us to.
Personal data submitted through innovexagency.com itself — contact enquiries, newsletter sign-ups, job applications — is handled under a separate retention schedule. See the privacy policy for the full lawful-basis table and per-surface retention.
We're aligned with the EU General Data Protection Regulation and the UAE Personal Data Protection Law for any personal data we process on your behalf. We can sign your Data Processing Addendum, or provide ours, before any project that involves customer or employee data.
We do not use client data to train AI models, and we do not share it with sub-processors beyond the named list below.
All deliverables produced under a paid engagement transfer to the client on final payment. That includes logos, brand systems, source design files, edited footage, code, and 3D assets. Underlying tools and proprietary methods remain ours; everything we make for you is yours.
Where a project includes licensed third-party assets — stock footage, fonts, music — we surface the licence terms in the deliverable handover so your team knows the scope of use.
We carry professional indemnity and public liability cover appropriate to creative production work. Certificates of insurance are available to procurement on request, and we can name your entity as additional insured for on-location production where required.
For client engagements, we use a short, named set of cloud and production vendors:
We'll notify you in writing before adding any new sub-processor that touches your data.
Sub-processors that handle personal data submitted through innovexagency.com (Resend, Google Analytics, Meta, Cal.com, hosting) are listed separately in the privacy policy.
Two-factor authentication is enforced across every team account. Devices are encrypted at rest. Project credentials are stored in a shared password manager with role-based access; we do not share credentials over email or chat.
On-set production involves data-wrangler protocols for camera media: duplicate copies on two physically separate drives before the camera card is wiped, with hashed verification.
Web work we deliver targets WCAG 2.1 AA. That includes keyboard navigation, semantic markup, sufficient colour contrast, alt text on meaningful imagery, and tested support for screen readers. We'll flag any deliverable where a creative direction conflicts with the standard so you can make an informed call.
Capability statement, insurance certificates, references, and tax documentation are available to procurement teams on request.