Security & Trust
Everything your procurement, IT, and privacy teams need to approve us — on one page
We never touch your credentials. By design, not by policy — there is nothing to grant, nothing to install, and nothing to deprovision when we are done.
Zero-Access Architecture
No Credentials Stored
We hold no passwords, tokens or API keys for your accounts — ever. There is no credential for us to lose.
No Systems Integration
Nothing is installed, connected or granted. Offboarding is instant and complete, because there was never anything inside your estate.
Public-Surface Parity
We see exactly what a rights holder's enforcement team sees — your public content, and no more than that.
Procurement & Privacy Questions
Well, we've got answers
What data do you actually collect and hold?
Public post URLs, captured media needed for identification, the audit findings themselves, and client contact details for delivery. Nothing beyond what the engagement requires.
Are you GDPR compliant, and is a DPA available?
Yes. We are UK and EU GDPR compliant, with UK and US entities, and a Data Processing Agreement is available on request along with our records of processing. A named sub-processor list, with jurisdiction and purpose, is shared with every DPA.
How long do you retain audit data, and can we have it deleted?
Audit artifacts are retained for the period set in your contract. Deletion on written request is completed within 30 days and confirmed to you in writing.
Do you carry insurance?
Professional indemnity and cyber liability cover are both held, and certificates are available to counterparties on request.
Who do we contact about a security issue?
A named individual rather than a shared inbox — write to security@copyrightcheck.ai and vulnerability reports are acknowledged within two business days.
Discover your risk and speak to one of our experts.
We are on Your Side
