Security and privacy

Your brand’s content, your customers’ trust

Sociomade is built so that doing the right thing is the default, for you and for the people whose photos you show.

Hosted in Europe

Your data is stored and processed in the EU. Enterprise customers can run a dedicated instance on an EU cloud of their choice.

Isolation in the database

Every workspace is separated by row-level security in the database itself, not only in application code. A mistake in one query cannot show another customer’s data.

No passwords to steal

Sign in with a passkey or an email link. API keys are stored only as hashes, and tokens for connected services are encrypted.

Every change on record

Moderation, rights, keys and settings are written to an audit log in which each entry seals the one before it, so changes cannot be hidden.

Privacy for the people in the photos

Uploads are checked and re-encoded, and location data is removed before anything is published. Consent is stored with the exact text the person agreed to.

Statistics without tracking

Galleries count views and clicks without cookies, without a visitor ID and without storing IP addresses.

AI under your control

Assistants connected through MCP never get more rights than the person who connected them. They start with read and propose: a person approves each change, and every step is in the audit log. Soon you can let trusted tasks run automatically, per task and always reversible.

Responsible disclosure

Found a vulnerability? Write to [email protected]. We respond within two working days.