This page collects the security facts already stated in the data privacy documentation and on the privacy page. It does not add a certification that is not published there.
- Photographs and account credentials are encrypted in transmission.
- You can receive the image so the service does not store it.
- Alternatively, a temporary link is kept for 2 hours to 14 days.
- US and EU processing are available. Other regions are available per request. Use one region for a given person’s preview and final file.
- The published policy includes periodic security reviews, and states GDPR and CCPA compliance.
- Do not log portraits or account secrets.
Security questionnaires and a processing addendum: support@idphoto.ai. Questions to put in that questionnaire are listed in the retention guide.