Security

1. Less data, kept for less time

• Images and results are deleted automatically within 30 days.
• Request logs do not contain images.
• We do not use customer images or results to train our models.
• We do not sell or share images with anyone except the service providers that run our infrastructure.

2. Encryption

• All traffic to the website and API uses HTTPS (TLS 1.2 or higher).
• Stored data is encrypted at rest by our hosting provider.

3. Infrastructure

The Service runs on Microsoft Azure in the European Union (Ireland and France). Our hosting provider is responsible for the physical security of its data centers.

4. Access control

• Only a small number of authorized team members can access production systems and API data.
• They access it only to fix a problem or investigate abuse.
• Internal accounts use two-factor authentication.
• Access to production systems is logged.

5. API keys and accounts

• Each API key is shown in full only once, when you create it.
• You can revoke or rotate a key at any time from the dashboard.
• Keys are stored in hashed form, not in plain text.
• Rate limits and credit limits protect against abuse.

Keep your keys secret. Never put them in client-side code or public repositories.

6. If something goes wrong

If we find a security incident that affects your data, we will tell you without undue delay and within the time the law requires. We will explain what happened, what data was affected, and what we are doing about it.

7. Certifications

Morphia is in beta and does not yet hold formal security certifications. Business customers can ask us to fill in a security questionnaire.

8. Report a security issue

If you find a vulnerability, please email [email protected] with the details. Please:

• Give us reasonable time to fix it before you share it publicly
• Do not access, change or delete other users' data
• Do not run tests that slow down or break the Service

We will reply to every report. We do not run a paid bug bounty program yet.

9. Contact

Morphia — morphiaone.ai
Security and general: [email protected]