How ScreenlyyID protects customer data

Where ScreenlyyID runs

The ScreenlyyID application and API run on Amazon Web Services in the US West (Oregon) region. Public traffic to the site, dashboard and API goes through Cloudflare.

Encrypted connections

The dashboard and API are served over HTTPS, and the application enforces HTTPS and HTTP Strict Transport Security. Connections from the API to its database require TLS.

Access control

Access to the dashboard is role-based. Admins can manage billing, users and API keys. Manual Review users can run checks and accept or decline results but cannot see API keys, billing or users. Developers can view charts, logs and API keys. The account owner is set as Admin by default.

API keys and rate limits

API access uses keys that are created and managed in the dashboard by users with the right role. The API applies rate limiting to protect it from abuse.

Uploads

The API accepts only PDF, JPEG and PNG files for document and image uploads.

Privacy

For how personal data is collected and used, read our privacy policy.

Questions

If you need details for a security review or questionnaire, contact our team and we will answer what we can confirm.