Security
Your models’ data, handled with care.
Agencies hold photos, measurements, ages and contact details of young people. These are the measures that protect them in Agency OS.
Two-factor sign-in for everyone
Every team member signs in with a password and an authenticator app. There is no way to switch it off for a user.
Separated agency data
Each agency’s data is separated, and access is checked on every request, including file uploads and client links.
Hosted in the European Union
Servers are in Germany, with daily database backups.
Retention you control
Rejected applications and old form submissions are deleted automatically after the period your agency sets.
Client links that expire
Packages and polaroid links carry an expiry date; after it, the link stops working.
Audit log
Sign-ins, failed sign-ins, team and role changes, packages and settings changes are recorded.
Spam and abuse protection
The embeddable application form uses time-based tokens, hidden traps and rate limits, without a third-party captcha.
Your data stays yours
We process it only to provide the service and export it on request.
Questions about data protection? Contact us. For the legal side of keeping applications and photos, read choosing agency software.