Governance is part of Innative’s architecture.
Capability without accountability is not an advantage in consequential work. Authority, human decisions and an attributable record are built into the path every Innative action travels.
Bounded
Authority is granted before anything runs. Innative operates inside that authority and nowhere else.
Human in the loop
What requires a person is defined by you, not judged in the moment. Those actions are presented with the work done, and proceed when a named person says so.
Recorded
What was noticed, decided, authorised and done is written as the work happens.
Yours
The account belongs to the company, exports in full, and leaves with it.
Where its authority ends.
Set by you before anything runs, written down, and enforced on the path every action travels.
- Proceeds on its own
- Work you have placed inside its authority. Each one is recorded as it happens.
- Always goes to a person
- Every category you place outside it. The classification is yours, configured up front, not judged in the moment.
- Never, under any configuration
- Acting outside a granted scope, reaching a system it was not given, or contacting somebody who has asked not to be contacted.
- Who sets the line
- You do. We do not decide what is consequential inside somebody else's operation, and we do not move the line without you.
- What is preserved
- For every action either side of the line: what was noticed, what was decided, under which authority, and what followed.
- How it is halted
- One control, held by people you name, stops everything Innative would send or change. Immediately, without us.
Written into the agreement before anything is switched on, so it can be attached to your own supplier assessment.
How your data is held.
- Separation
- Each company's data is isolated from every other company's, enforced below the application.
- Access
- Whatever access you grant is held encrypted, never displayed, and revocable at any time.
- Minimisation
- The narrowest set of information the work requires. We do not copy systems wholesale.
- Traceability
- Every fact Innative asserts is linked to the record it came from, and every action to the authority it ran under.
- Permission
- Consent and contact status are enforced before anything goes out and checked again as it does.
- Barriers
- Where obligations require separation rather than visibility, those barriers are configured and enforced.
- Portability
- Your record exports in full, at any time, and leaves with you.
Technical detail is covered under agreement.
SecurityThe regimes our clients answer to
We build to the standards our clients are held to, so obligations are discharged with artefacts rather than assurances.
- UK GDPR
- ICO
- FCA and SMCR
- Consumer Duty
- SRA
- CQC
- NHS DSP Toolkit
Request an Innative briefing.
A working session on your operation, what Innative would understand and take on inside it, and what an implementation would involve. Held by the people who build it.