Security, privacy and compliance

No. Images are deleted as soon as the analysis completes and are never retained, labelled or used for training. This is a contractual commitment in Section 6 of our Master Services Agreement.

Everything runs in the European Union on Hetzner infrastructure in Nuremberg, Germany. Images never leave that server. The only subprocessors outside the EU are Stripe (payments) and Google (optional sign-in) — see the subprocessor list for the full picture and transfer safeguards.

For the images you submit and the results we return, Medienor AS is a processor acting on your instructions, governed by our DPA. For your account, billing and security logs we are an independent controller under our Privacy Policy.

Yes. The DPA already applies to every account without signature, but if procurement needs an executed copy — with the EU Standard Contractual Clauses annexed — email hello@sightova.com and we will return a countersigned PDF within a few business days.

Not yet. Sightova has not completed an independent SOC 2 or ISO 27001 audit. Instead of a badge we publish our actual controls on this page, complete customer security questionnaires (CAIQ, SIG Lite or your own template) and sign our DPA. If a formal attestation is a hard requirement for your review, tell us — it directly informs our roadmap.

Not yet commissioned. Our application security controls are described above and we welcome good-faith security research under the disclosure policy on this page. Enterprise customers may run their own non-destructive testing against a dedicated account with prior written agreement.

A small number of named engineers with SSH key access to production. Customer data is only accessed to provide support you have requested, to investigate abuse or security incidents, or where the law requires. Because images are not retained, there is no image content for anyone to access after a request finishes.

Delete your account from the dashboard and every analysis record, API key and profile field is removed. For selective deletion, or to exercise rights on behalf of a data subject, email us and we will complete verified requests within 30 days. Billing records required by Norwegian bookkeeping law are kept only for the statutory period.

Sign-in today is email and password or Google. Enterprise SAML/OIDC single sign-on is not yet available; if it is a requirement, contact us and we will scope it with you.

For organisations that cannot send images to a third party at all, we offer self-hosted deployment of the detection models under an enterprise agreement. Get in touch via the contact page to discuss requirements.

Self-serve plans do not carry a contractual SLA. Enterprise orders can include an uptime commitment with service credits and defined support response times; the order form controls. See Section 10 of the MSA.

We post changes on the subprocessor page at least 30 days before they take effect and email account owners who have subscribed to notifications. You can object on reasonable data-protection grounds and, if we cannot resolve it, terminate with a pro-rata refund.

Your requests pass through RapidAPI's gateway (a US company) before reaching us, so RapidAPI is an additional party under its own terms. Once the request arrives, Sightova handles it exactly as described here: analysed in the EU, image deleted, no training. If you need everything to stay in the EU, subscribe to Sightova directly instead.