PhotoRobot Security - Overview

PhotoRobot Cloud is a cloud-native SaaS platform running fully on Google Cloud Platform (GCP), designed with security, reliability, and privacy-by-design principles. The platform provides automated product photography workflows with robust access control, secure data processing, and operational continuity.

‍

Key Principles

Cloud-native design in a modern, resilient infrastructure.
Zero-trust aligned: all access authenticated; no anonymous access.
Security-by-default: encryption, SSO, role-based authorization.
Operational transparency: monitoring, logging, accountability.

‍

Infrastructure & Location

Cloud Provider: Google Cloud Platform (GCP)
Region: europe-west4 (Netherlands)
Architecture: Single-region with automated backups

‍

Authentication & Access Control

SSO via Google Identity
No local passwords inside PhotoRobot Cloud
Password complexity enforced by Google, not by the application
RBAC roles: Production, Backstage, Retoucher

‍

Data Protection

Encryption in transit: TLS 1.2+
Encryption at rest: AES-256 (GCP-managed keys)
GCP Shielded VMs and industry-standard protections

‍

Monitoring & Security Controls

SIEM-equivalent: GCP Cloud Logging & Monitoring
Audit logs for user actions and system events
Alerting on anomalies and operational issues

‍

Operational Continuity

Daily backups of core datasets
Disaster Recovery: single-region with restore procedures
High availability through GCP-managed infrastructure

‍

AI Usage

Only OCR (Google Vision) for text extraction
No decision-making AI
Full human oversight and accountability

PhotoRobot Cloud maintains a secure operational environment using Google Cloud’s industry-leading infrastructure and rigorous internal governance.