You're vetting a vendor, not a vibe. So here's the unglamorous part up front: how the system is secured, how we contract, how it's priced, and exactly where the money goes. No mystery line items, no forever rights you didn't ask for.
Every record is protected by row-level security — a person reads their own data and no one else's. Generation is consent-gated and default-deny: nothing renders without a matching, in-scope consent on file. The privileged service key never ships to a browser, and verification events are signature-checked with replay protection. These are gates in the pipeline you can test, not bullet points in a deck.
Each engagement licenses specific, consented uses on scoped, time-boxed, renewable terms. PPL is a licensed intermediary — we route a defined use to your team for a defined term; we never acquire a person and never resell one. AI-augmented creative is labeled in the output and in the record. The executed agreement governs, and it says what it does.
Eighty percent of every license goes to the person whose likeness it is — always. We take a margin on the work the studio does, not a cut of who someone is. Pricing tracks to the use and the term you actually run; because terms are time-boxed and renewable, you're not paying for forever rights you'll never use. The person is paid, named in the record, and can revoke.
We'd rather show the work than certify it in a drawer. Ask for the security model, the consent-ledger export format, the revocation behavior, and the standards we design to — BIPA, GDPR, CCPA, and the forming likeness-and-voice rules. Specifics are confirmed per engagement and per jurisdiction. Send your questionnaire; we answer in writing.
Questions about how this works? We'll walk you through it.