Security & Compliance

Our approach

Security is treated as part of delivery rather than a final review step. Engagements include a defined security boundary, least-privilege access, encryption of data in transit and at rest, and a documented architecture before build work begins.

Client data

Where an engagement requires access to client systems or data, that access is governed by the engagement agreement and any data processing terms attached to it. We work inside the client's own cloud tenancy wherever possible, so client data stays within the client's security boundary.

Access is granted per engagement, limited to the individuals doing the work, and revoked on completion.

AI and generative AI engagements

AI systems we build use enterprise service endpoints configured so that client prompts and documents are excluded from provider model training. Retention, residency and logging settings are agreed in writing during the architecture phase.

Where a system handles personal or regulated data, retrieval scope, redaction and audit logging are designed in from the start rather than added afterwards.

This website

This website is served over HTTPS. It does not process payments, host client data, or provide a login. Information submitted through the enquiry form is covered by our Privacy Policy.

Reporting a vulnerability

If you believe you have found a security issue affecting this website or any system we operate, please email info@innovinfotech.com with the details. We will acknowledge your report and keep you updated while we investigate. Please do not publicly disclose the issue before we have had a chance to address it.

Compliance questions

For questionnaires, certifications or contractual security terms required by your procurement process, contact us and we will route your request to the right person.

Contact

Questions about this page can be sent to info@innovinfotech.com or +1 302 515 0569.