Security & Data Protection

Your product images are business-critical assets. Here is how we protect them at every stage.

All files stored in Cloudflare R2 private buckets with company-scoped access. No shared storage between clients.

Row-level security (RLS) enforces strict company boundaries. Editors only see assigned tasks. Clients only see their own orders.

Originals retained 30-90 days, edited files 90-180 days. Enterprise clients can negotiate custom retention windows.

Multipart resumable uploads with MIME validation, size checks, and SHA-256 checksums for every file.

Delivery files receive deterministic signed naming with checksum manifests. Archives built only from QC-passed outputs.

Every handoff — assignment, submission, QC decision, delivery — is logged with actor, action, and timestamp.