How we protect your systems and data
Our ISO 9001:2015 and CMMI Level 3 processes cover how we access, build, test and hand over every project. Here is what that means in practice.
What we do on every project
Least-privilege access
Named accounts, MFA and only the access each person needs, removed when the project ends.
Encryption
Data encrypted in transit, and at rest on the cloud platforms we deploy to.
Backups & recovery
Automated backups with recovery tested on a schedule for systems we manage.
Separate environments
Development, testing and production kept apart; no real personal data in testing unless agreed.
Secure development
Code review on every change and checks against common web risks (OWASP Top 10) before launch.
Audit trails
Logs of admin and agent actions in the systems we build, so you can see who did what.
Responsible AI by default
No training on your data
We use enterprise AI APIs that do not train models on your data under their commercial terms.
People approve key steps
AI agents work within limits; anything involving money, customers or records can require approval.
Measured quality
Evaluation sets and monitoring for answer quality and cost, before and after launch.
Paperwork we sign
Available before the project starts.
Mutual non-disclosure, signed before any data is shared.
Master services agreement and statement of work with scope and acceptance criteria.
How we process personal data on your behalf, for clients who need them.
We complete your vendor security questionnaire.
Code, designs and data belong to you once paid for.
Full data export, documentation and credentials returned at the end.
If something goes wrong
Detect
Monitoring and alerts on systems we manage
Contain
Access limited and issue isolated
Inform
You are told promptly, with what we know
Fix
Root cause fixed and tested
Report
Written incident report
Improve
Changes so it does not recur
Security FAQs
Are you ISO 27001 or SOC 2 certified?
No. We are ISO 9001:2015 and CMMI Level 3 certified, and follow the practices above. We complete your security questionnaire and work within your own security policies.
Where is our data stored?
In the cloud region you choose, such as India, the UK or EU, or the UAE, or in your own cloud account.
Do your staff sign confidentiality agreements?
Yes. Every team member is bound by confidentiality terms, and we sign your NDA before access.
What happens to our data when the project ends?
We return or delete it as you instruct, remove our access and hand over documentation and credentials.
Simple to contract, simple to pay
No surprises on paperwork. You contract with the Involve entity that suits you and pay in your currency.
Contract with a local entity
Involve Digital Technologies Pvt. Ltd. (India) · Roam Communication Limited (UK) · Involve Technologies (Dubai, UAE)
Invoiced in your currency
GBP, EUR, USD, AED, AUD or INR. Milestone billing for projects, monthly billing for Manage plans.
Easy ways to pay
Bank transfer or international wire, card payments, and UPI in India.
Paperwork ready
NDA, MSA, statement of work and data processing terms available before you start.
IP and data protected
Code, designs and data belong to you once paid for. Mutual NDA signed first.
Working in your time zone
Meetings scheduled in your business hours, with weekly demos and written updates.
Let's talk about Involve Technologies
Tell us what you need in four quick steps. You get a reply from a consultant, not an auto-responder.
- Free 45-minute discovery call
- Indicative quote on the call
- Mutual NDA on request