TRUST & SECURITY
Use a strong, unique password and keep recovery details current. Never share passwords between team members; give each person their own access and remove it promptly when responsibilities change.
Apply the principle of least privilege. Team members should receive only the gallery, client and business permissions needed for their role, with broader administrative access limited to trusted owners.
Choose the intended audience before publishing. Review link visibility, password protection, download permissions and any guest-facing discovery features, then preview the client experience before sharing it.
A photography workspace may contain photographs, client details, contracts, booking context and payment status. Access and retention should be limited to what the service requires and documented in PhotoGram’s production privacy terms.
Only authorised workspace members should access business records. Payment credentials should flow through approved payment processing services and should never be sent to PhotoGram support in messages or attachments.
Change compromised credentials, review team access and report the affected account or page with the time and steps observed. Do not include passwords, payment credentials or private photographs in the initial report.
PhotoGram should confirm the signal, contain potential harm, preserve evidence, determine scope and communicate with affected parties or authorities when facts and obligations require it. Recovery should include validation and documented learning.
This prototype does not claim ISO 27001, SOC 2, PCI DSS certification, a completed penetration test, specific encryption implementations or contractual uptime. Such claims require current technical evidence and appropriate legal review.