Security & Protections
1. How We Handle Your Data (Stateless Processing)
Your privacy and security are fundamental to how MaskIT operates. A core principle of our architecture is stateless processing, which guarantees that your sensitive, original files are never at risk on our systems.
What "Stateless" Means
Stateless processing means that we handle your data transiently. When you upload a file, it is processed in-memory and is never permanently stored on our servers. We do not retain your original files, nor do we store the anonymized results.
The Anonymization Process
Our secure process is designed for maximum privacy at every step:
- Secure Upload: Your file is encrypted in transit and uploaded securely to our processing environment using industry-standard TLS encryption.
- In-Memory Anonymization: The anonymization is performed in real-time in the server's volatile memory (RAM).
- Secure Download: Once the process is complete, the anonymized result is made available for you to download.
- Immediate Deletion: The original files are deleted from our systems immediately after processing. The anonymized result is available for download only and is permanently removed once you download it, or automatically after 2 hours.
The Benefit
This architecture means there is zero risk of your original, sensitive data being breached from our systems, because we simply don't keep it. You retain full control over your data at all times.
2. Compliance with Global Privacy Laws
MaskIT is designed to help customers comply with a wide range of data privacy regulations across the globe. We are committed to providing a service that meets the highest standards of data protection, wherever your business operates.
Support for Key Regulations
Our platform helps you meet the anonymization requirements of major data privacy frameworks, including but not limited to:
- GDPR (General Data Protection Regulation) in Europe
- CCPA / CPRA (California Consumer Privacy Act / Privacy Rights Act) in the USA
- PIPEDA (Personal Information Protection and Electronic Documents Act) in Canada
- LGPD (Lei Geral de Proteção de Dados) in Brazil
- others.
Data Residency & Region-Based Hosting
We understand that global organizations have strict data sovereignty requirements. To address this, we provide both a standard solution and a flexible option for our enterprise customers.
- Standard Hosting (All Plans): By default, all customer data is processed exclusively in our datacenters located within the European Union (EU). This standard setup guarantees that your data is protected under the strict jurisdiction of the GDPR and simplifies compliance for businesses operating in Europe.
- Flexible Hosting (Enterprise Plan): For our Enterprise Plan customers, we offer the flexibility to deploy a dedicated instance of MaskIT in other geographic regions. If your organization requires data to be processed exclusively in the United States (USA) or another specific region to meet local laws, we can provide a tailored hosting solution.
This ensures that your data is processed only in the region of your choice, providing a powerful solution to meet your organization's specific compliance and security needs.
3. Irreversible Anonymization
A critical requirement of true anonymization is that the process must be irreversible. With MaskIT’s default settings, anonymization is always irreversible: once data is masked, it cannot be reverted to its original state.
A One-Way, Destructive Process
Our masking methods—whether blur, pixelation, or a solid box—are destructive. They work by permanently altering the pixels of the original image data in the masked areas.
We do not use reversible layers, overlays, or masks that could be removed to reveal the original information. The anonymized output cannot be reverse-engineered to reconstruct the original content, not even by us.
⚠️ Note: Users can adjust masking parameters (e.g. blur intensity). While default values ensure irreversibility, selecting weaker settings may reduce the strength of anonymization.
4. Audit Logs & Access Control (For Business & Enterprise Plans)
For organizations that require full transparency and accountability, MaskIT offers comprehensive audit logs and access control features.
What are Audit Logs?
Administrators of our Business and Enterprise accounts can view a detailed and immutable log of all activities performed by users within their organization. This provides a clear and traceable history of all data processing.