Liability brief
For studio counsel
Confidential
The exposure
When a performer's face, body, or voice is scanned, that data sits indefinitely on VFX vendors' servers — no record of consent, no control over access, no proof of deletion. Under GDPR, BIPA, and SAG-AFTRA's digital-replica rules, the production carries the risk.
Without ImageVault
$1–7M+
Per-production exposure: statutory BIPA damages, GDPR penalties, and SAG-AFTRA grievance liability for uncontrolled likeness data.
With ImageVault
<0.5%
Of the VFX budget. Consent bound, access gated and audited, data purged on licence expiry — the liability is closed, not carried.
How the gate works
Permission is tied to the scan at capture. No consent, no access.
VFX work through a proxy. They use the likeness; they never hold it.
A tamper-evident trail: who opened it, when, for how long.
On expiry the scan is destroyed — with proof you can hand to a court.