Devenex ("Devenex," "we," "us," or "our") provides an Execution Control Plane that governs, observes, and records AI-driven and human-driven actions across enterprise systems. This Privacy Policy explains what information we collect through devenex.com and the Devenex platform, why we collect it, how it is protected, and the choices and rights available to you. It applies to visitors of our website, prospective and current customers, and authorized users of the Devenex platform.
Who We Are
Devenex is a technology company with offices in New York (405 Lexington Avenue, 9th Floor, New York, NY 10174, USA) and London (Two Kingdom Street, 6th Floor, Paddington, London W2 6BD). For the purposes of applicable data protection law, Devenex acts as the data controller for information collected through this website, and generally acts as a data processor for enterprise data our platform handles on behalf of a customer under a separate agreement.
Information We Collect
Information you provide directly
- Identity and contact details — name, work email, phone number, job title, company name
- Content of inquiries — messages submitted through Contact, Demo, or Newsletter forms
- Account and configuration information — usernames, roles, policy settings, and approval workflows you set up within the platform
Information collected automatically
- Technical data — IP address, browser type and version, device and operating system, referring/exit pages
- Usage data — pages visited, time on page, click paths, session duration, and interactions with on-site tools
- Cookies and similar technologies — see Section 6 below
Platform and execution data
- Intent records — the actions or outcomes requested by a human, agent, or system through Devenex
- Policy and approval metadata — the rules applied and approvals granted or denied for a given action
- Execution and audit logs — system interaction logs, timestamps, outcomes, and evidence generated as actions move through the Execution Model (Intent → Policy → Approval → Execution → Evidence)
Platform and execution data is generated in the course of delivering the service to a customer under contract. Devenex processes this data as instructed by that customer and does not use it to build profiles of individual end users beyond what the customer’s configuration requires.
How We Use Information
We use the information described above to:
- Operate, maintain, and improve devenex.com and the Devenex platform
- Provision accounts, apply enterprise policies, and route approvals correctly
- Maintain the governance, observability, and accountability guarantees of the Execution Control Plane, including tamper-evident audit logging
- Respond to inquiries, demo requests, and support needs
- Send product updates, newsletters, or security notices you have opted into
- Detect, investigate, and prevent security incidents, fraud, or misuse
- Meet legal, regulatory, and contractual obligations, including compliance evidence (e.g., GDPR, SOC 2-style controls) our customers may request
Legal Basis for Processing (EEA/UK Visitors)
Where the UK or EU GDPR applies, we rely on one or more of the following legal bases:
- Contract — to provide the platform and services you or your employer have engaged us for
- Legitimate interests — to secure our systems, improve our website, and communicate about relevant products, balanced against your rights
- Consent — for optional cookies, newsletters, and marketing communications, which you may withdraw at any time
- Legal obligation — where we must retain or disclose information to comply with law
International Data Transfers
Because Devenex operates from the United States and United Kingdom and works with global infrastructure providers, information may be transferred to, stored, and processed in countries other than your own. Where required, we rely on recognized safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect data transferred outside the EEA or UK.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including satisfying legal, accounting, or reporting requirements. Platform and execution/audit log data is retained according to the retention terms agreed with each customer, reflecting the accountability and compliance purposes such records serve. When information is no longer required, we securely delete or anonymize it.
Data Security
Devenex applies enterprise-grade safeguards appropriate to the sensitivity of the data we handle, including:
- Encryption of data in transit and, where applicable, at rest
- Role-based access controls and least-privilege principles
- Continuous audit logging and monitoring of platform activity
- Secure infrastructure and vendor management practices
No system is completely secure. If we become aware of a breach affecting your personal information, we will notify affected individuals and relevant authorities as required by applicable law.
Your Rights
Depending on your location, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate or incomplete information
- Deletion — request erasure of your information, subject to legal or contractual retention needs
- Restriction or objection — limit or object to certain processing, including direct marketing
- Portability — receive your data in a portable format, where technically feasible
- Withdraw consent — for any processing based on consent, at any time, without affecting prior lawful processing
- Lodge a complaint — with your local data protection authority (e.g., the ICO in the UK, or your EU member state authority)
To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframe required by applicable law. Where the personal information is processed by Devenex on behalf of an enterprise customer, we will direct your request to that customer as the data controller where appropriate.
Children’s Privacy
Devenex’s website and platform are intended for business use and are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page indicates when changes were last made. For material changes, we will provide additional notice where appropriate (e.g., a website banner or email).
Contact Us
For privacy-related questions, requests, or concerns:
- Email: info@devenex.com
- New York: 405 Lexington Avenue, 9th Floor, New York, NY 10174, USA
- London: Two Kingdom Street, 6th Floor, Paddington, London W2 6BD