Security

Last updated: 26 October 2026

ImageWhisperer is provided by Voelspriet, trading as Digital Digging and Image Whisperer.

ImageWhisperer runs its own detection models on dedicated hardware in Germany. Traffic is encrypted end to end, one person has administrative access, and images from paying customers are never written to disk. This page summarises our technical and organisational measures (GDPR Art. 32). The full TOMs document is available to contractual partners on request.

1. Hosting

Dedicated server (not shared or virtual) at Hetzner Online GmbH, Falkenstein, Germany (EU). Hetzner's data centres are certified to ISO 27001.
Physical access is restricted to Hetzner staff, with access control and 24/7 video surveillance.
Disk-level redundancy (RAID); services restart automatically on failure.

2. Network and encryption

All traffic over HTTPS with TLS 1.3; HTTP is redirected and HSTS is enabled.
Cloudflare sits in front of the service as CDN, firewall and bot protection (Turnstile). The server only accepts web traffic coming through Cloudflare.
Calls to external services are made over encrypted HTTPS connections.
Backups are encrypted with AES-256 before they leave the server.

3. Access control

Administrative access is limited to one person, by SSH key only. Repeated failed logins are blocked automatically.
Server management panel protected by a separate password and two-factor authentication.
Secrets and API keys are kept in environment variables, never in source code or version control.
Every check requires an account; API access is by personal key. Admin functions sit behind a separate authentication gate.

4. Application security

Content Security Policy, X-Content-Type-Options, Referrer-Policy and Permissions-Policy headers.
Upload validation on file type, size and content; rate limits per IP address and per browser.
CORS limited to authorised partner origins.
Automated screening for illegal material, with permanent bans for violations.

5. Data handling and retention

Data	Retention
Images from paying customers	Not stored: processed in memory and discarded after the analysis
Images from free users	At most 12 months, then deleted automatically
Analysis results	At most 12 months
IP addresses, visitor analytics, feedback	90 days
Account and payment records	Account lifetime plus 7 years (legal retention for financial records)

Erasure requests are handled within 30 days. Customer images are never used to train third-party models. Enterprise customers can agree a shorter retention period for their API key.

6. AI processing

The core detection models run on our own hardware in Germany; for most of the analysis the image never leaves our infrastructure.
For scene understanding and cross-checks, the image is sent to a small number of external services. They are listed, with purpose and location, on our subprocessors page. That list applies to the free, public service; paying tenants choose which services are used for their account.
The verdict is advice for a human editor, with reasons. Rules written by us decide the verdict colour, not a language model.

7. Backups and availability

Daily encrypted backups to a Hetzner Storage Box (Germany) and to Google Cloud Storage (Frankfurt, Germany).
A documented recovery plan for a full rebuild from backups; a separate staging environment for testing changes.

8. Incidents

Contractual partners are notified within 72 hours of a personal data breach that affects their data (GDPR Art. 33). The Dutch supervisory authority (Autoriteit Persoonsgegevens) is notified where required, and affected people are informed when there is a high risk to them (Art. 34).

9. Certifications

Our hosting is ISO 27001 certified. These measures are reviewed at least once a year and after any incident.

10. Contact and reporting a vulnerability

Questions about security, requests for the full TOMs document or a vulnerability report: [email protected]. Please do not test against other users' data.