--- title: "Security in Fotoware: How we protect your data" description: How Fotoware ensures the security of your data through encryption, access control, and strict IT security measures. image: https://www.fotoware.com/hubfs/blog/Fotoware_blog_header_gradient.png --- [Skip to content](https://www.fotoware.com/legal/security#main-content) - Platform Back ## Product - [Digital Asset Management platforms \>](https://www.fotoware.com/digital-asset-management-platform?hsLang=en) - [Fotoware Veloz](https://www.fotoware.com/platform/fotoware-veloz?hsLang=en) Classic DAM - [Fotoware Alto](https://www.fotoware.com/platform/fotoware-alto?hsLang=en) API-first DAM ## Additional products & add-ons - [Fotostation](https://www.fotoware.com/platform/products/fotostation?hsLang=en) High-speed desktop image management - [Flow](https://www.fotoware.com/platform/products/flow?hsLang=en) Workflow automation - [Integrations & plugins](https://www.fotoware.com/platform/integrations?hsLang=en) ## Capabilities - [Content authenticity](https://www.fotoware.com/platform/capabilities/content-authenticity?hsLang=en) - [Organize and search](https://www.fotoware.com/platform/organize?hsLang=en) - [Integrate with other tools](https://www.fotoware.com/platform/integration-capabilities?hsLang=en) - [Automate workflows](https://www.fotoware.com/platform/automate?hsLang=en) - [Collaborate with others](https://www.fotoware.com/platform/collaborate?hsLang=en) - [Distribute content securely](https://www.fotoware.com/platform/distribute?hsLang=en) - [Manage licenses and rights](https://www.fotoware.com/solutions/license-and-rights-management?hsLang=en) - [AI in Fotoware](https://www.fotoware.com/platform/ai-capabilities?hsLang=en) - Solutions Back ## Use Case - [Archiving and Categorization](https://www.fotoware.com/solutions/archiving-and-categorization?hsLang=en) - [Omnichannel Content Delivery](https://www.fotoware.com/solutions/omnichannel-content-delivery?hsLang=en) - [Communications & marketing](https://www.fotoware.com/solutions/marketing-communications?hsLang=en) - [Digital Evidence Management](https://www.fotoware.com/solutions/digital-evidence-management?hsLang=en) - [GDPR and Consent Management](https://www.fotoware.com/solutions/gdpr-and-consent-management?hsLang=en) - [Product Content Management](https://www.fotoware.com/solutions/product-content-management?hsLang=en) - [Master Data Management](https://www.fotoware.com/solutions/master-data-management?hsLang=en) ## Industry - [Media and Publishing](https://www.fotoware.com/solutions/media?hsLang=en) - [Museums and archives](https://www.fotoware.com/solutions/glam?hsLang=en) - [Law Enforcement and Defense](https://www.fotoware.com/solutions/law-enforcement-and-defense?hsLang=en) - [Manufacturing](https://www.fotoware.com/solutions/manufacturing?hsLang=en) - [Entertainment](https://www.fotoware.com/solutions/entertainment?hsLang=en) - [Retail and E-Commerce](https://www.fotoware.com/solutions/retail-and-ecommerce?hsLang=en) - Resources Back ## Learning - [Customer stories](https://www.fotoware.com/blog/tag/customer-stories?hsLang=en) - [Webinars and events](https://www.fotoware.com/resources/webinars-events?hsLang=en) - [Guides and ebooks](https://www.fotoware.com/resources/guides?hsLang=en) - [Blog](https://www.fotoware.com/blog?hsLang=en) ## Help& support - [Help center](https://www.fotoware.com/resources/help-center?hsLang=en) - [Consultancy & support](https://www.fotoware.com/resources/consultancy?hsLang=en) - [Tutorials](https://www.fotoware.com/resources/tutorials?hsLang=en) - [API & custom integration](https://www.fotoware.com/platform/integrations/api-custom-integrations?hsLang=en) - [Pricing](https://www.fotoware.com/pricing?hsLang=en) - About Back - [About us](https://www.fotoware.com/about?hsLang=en) - [Why Fotoware](https://www.fotoware.com/about/why-fotoware?hsLang=en) - [Careers ↗](https://careers.fotoware.com/) - [Company news](https://www.fotoware.com/blog/tag/fotoware-news?hsLang=en) - [Find a partner](https://www.fotoware.com/partners?hsLang=en) - [Contact us](https://www.fotoware.com/contact-us?hsLang=en) [Book meeting](https://www.fotoware.com/book-meeting?hsLang=en) # Security in Fotoware How Fotoware protects customer data across all products and services. ## 1. Security overview Fotoware builds and operates all services with a security-first mindset. Our products run exclusively on Microsoft Azure, using its hardened cloud infrastructure, global compliance posture, and advanced security capabilities. All products and services follow the same core security controls. ## 2. Security governance - Centralized security program led by dedicated security leadership. - Organization-wide security policies covering access control, development, privacy, incident response, vendor management, and data protection. - Mandatory security and confidentiality training for all employees and contractors. - Enforcement of least privilege and strict disciplinary consequences for violations. ## 3. Cloud & infrastructure security - All Fotoware services operate on Microsoft Azure. - Data is stored and processed in regions aligned with the customer’s selected deployment location. - Azure-native controls such as network segmentation, firewalls, DDoS protection, managed services, and high-availability architectures are used throughout. - Built-in resilience and disaster-recovery capabilities cover three defined failure levels: server failure (automatic recovery within ~3 minutes), loss of a datacenter building (service recovery within ~3 hours), and full region loss (disaster-recovery restoration within ~3 days), aligned with Fotoware’s business continuity policies. ## 4. Data protection - All data in transit is encrypted using modern HTTPS/TLS. - All data at rest is encrypted using Azure-managed encryption. - Customer data is kept within the selected region and handled according to strict data minimization principles. - Backups follow Fotoware’s corporate backup policy and use Azure Recovery Services, with immutable backups taken at least every 24 hours. Daily recovery points are available for 7 days, and weekly recovery points are retained for approximately one month, enabling restoration more than 30 days back in case of disaster or customer error. - Backup processes are reviewed regularly for integrity and reliability. ## 5. Identity & access management - Role-based access control governs all internal and operational systems. - Least-privilege access is enforced for all administrative functions. - All privileged access is logged and audited. - Support personnel require explicit customer approval before accessing customer environments. - Strong authentication is required for all internal accounts with access to production systems. ## 6. Secure development & testing - Secure development lifecycle with mandatory code review, dependency management, and automated security scanning. - Privacy-by-design and security-by-design principles applied to all products. - Regular internal testing supplemented by external assessments or penetration tests when appropriate. - Controlled release and change management practices ensure safe deployment. ## 7. Operational security - 24/7 monitoring of infrastructure and services for security-relevant events. - A documented and regularly tested incident response plan governs detection, containment, remediation, and communication. - Logging and auditing applied across sensitive systems. - Vendor and subprocessor security reviews ensure alignment with Fotoware’s standards. ## 8.  Incident Response & Recovery - Our approach focuses on preparedness, containment, recovery, and operational resilience. - Fotoware maintains incident response, business continuity, backup, and disaster recovery capabilities designed to support service restoration following a cyber incident. - Our strategy prioritizes recovery through established processes and resilient operations rather than dependence on negotiations with threat actors. ## 8. Compliance & privacy - Full GDPR compliance across all Fotoware services. - Data Protection Impact Assessments (DPIA) maintained and updated as needed. - Subprocessors used only for necessary operational functions and are vetted for security and privacy capabilities. - Customers retain full rights to access, export, erase, and manage their data. ## 9. Customer data lifecycle & rights - Customers may export or migrate their data at any time. - Upon contract termination, customer data is securely deleted following a defined process. - Fotoware personnel may only access customer data with explicit customer consent. - Guidance on metadata governance helps customers manage their own retention and deletion needs. ## Have questions about security or compliance? We’re here to help - get in touch with our team. [Book a meeting](https://www.fotoware.com/book-meeting?hsLang=en) [Contact us](https://www.fotoware.com/contact-us?hsLang=en) ![eco-lighthouse-miljøfyrtårn](https://www.fotoware.com/hs-fs/hubfs/home/eco-lighthouse-milj%C3%B8fyrt%C3%A5rn.png?width=150&height=128&name=eco-lighthouse-milj%C3%B8fyrt%C3%A5rn.png) ### Company - [About us](https://www.fotoware.com/about) - [Why Fotoware](https://www.fotoware.com/about/why-fotoware) - [Careers ↗](https://careers.fotoware.com/) - [Find a partner](https://www.fotoware.com/partners) - [Contact us](https://www.fotoware.com/contact-us) ### Help & support - [Support center](https://www.fotoware.com/resources/help-center) - [Fotostation](https://www.fotoware.com/platform/products/fotostation) - [Consultancy](https://www.fotoware.com/resources/consultancy) - [System status](https://status.fotoware.com/posts/dashboard) - [Documentation](https://learn.fotoware.com) ### Trust Center - [Legal](https://www.fotoware.com/legal) - [Security](https://www.fotoware.com/legal/security) - [Sustainability & ESG](https://www.fotoware.com/hubfs/about/2026-Fotoware-ESG-Policy%20%20Strategy.pdf) ### Locations Fotoware AS (HQ) Tollbugata 35 0157 OSLO Norway FotoWare Switzerland AG Brown Boveri Str. 7 5400 Baden Switzerland  - [Visit our LinkedIn page](https://www.linkedin.com/company/fotoware-a.s) - [Visit our Facebook page](https://www.facebook.com/Fotoware/) - [Visit our Instagram page](https://www.instagram.com/fotoware_official/#) Copyright 2026 Fotoware All rights reserved. - [Terms of service](https://www.fotoware.com/legal/saas-subscription-agreement) - [Privacy policy](https://www.fotoware.com/legal/privacy-policy) - [Cookie policy](https://www.fotoware.com/legal/privacy-policy)