Trust & security
Your collection never leaves your hands.
PhotoGraph works with some of the most sensitive images an organization can hold: photos of real people, often given in trust by donors and families. We built it so that trust never depends on ours.
Sovereign by design
Protections built into the architecture, not a policy page.
Your data stays in your environment
PhotoGraph is deployed on your infrastructure. Images, the identity graph, every result and all metadata stay there. There is no cloud service in the processing path.
No training on your photos
PhotoGraph works from pixels alone, with no model training. Your collection is never used to improve a product for anyone else.
You control access
Because it runs on your systems, your existing access controls, logging, retention and deletion policies apply to PhotoGraph and its results.
Usage statistics are the only thing we ever receive, and we prove it with you.
Before go-live, we test the deployment together with your team to confirm that the only information transmitted back to us is usage statistics. No images, no details about what was scanned, and no metadata of any kind.
- We receiveUsage statistics
- We never receiveImages, scan details, results or metadata
Risk mitigation
The photos you never see are the biggest risk.
With other methods, the images they miss don’t show up as errors. They simply never appear, so no one knows they exist. In our real-world test, other methods missed between 284 and 443 of the 524 photos of one person.
Revenue left uncaptured
Every missed photo is content a subscriber never finds and a licensee never buys. It sits in your archive earning nothing, and no report shows what you lost.
Incomplete case files
An investigation or court filing built on a fraction of the available images is open to challenge. When the other side finds the photos your search missed, the case is weaker for it.
Requests you can’t fully honor
When a family, donor or rights holder asks for every image of a person to be found, restricted or removed, you can only act on the ones your search returns.
Greater trust with PhotoGraph: All 524 of 524 found.
Complete results, and every link in the identity graph can be inspected and checked.
Responsible use
Powerful tools need clear limits.
Finding a person across a collection is valuable for families, historians and investigators. It also calls for care. We scope every deployment with the customer before it goes live.
- Purpose defined up front. Each license names the collections and uses it covers.
- Privacy law is part of scoping. We work with customers on consent, notice and retention under biometric-privacy laws that apply to them, such as Illinois BIPA.
- Explainable links. Every match is an edge in the identity graph that can be inspected, questioned and removed.