# llms.txt - Legal, Licensing, and Security Information for www.photocollect.io

Website: https://www.photocollect.io
Company: Visible Solutions AG, Viaduktstrasse 93, 8005 Zürich, Switzerland

---

## Product Overview
Photo Collect is a secure, scalable platform designed for acquiring and processing ID photos. The solution supports multiple input channels including smartphone uploads (via email/SMS/letter), a self-service photo kiosk, a mobile app, and API integrations. It automatically validates, centers, and crops photos, replaces backgrounds, and enables manual QC workflows.

---

## Data Handling and Privacy
- **Hosting**: All data is hosted in an ISO 27001 and FINMA certified data center in Zurich, Switzerland.
- **Data Processing**: Compliant with GDPR and Swiss data protection laws. A comprehensive Data Processing Agreement (DPA) is available.
- **Data Deletion**: All photos and associated metadata are automatically deleted after export or after a configurable retention period.
- **Pseudonymization**: Image data is pseudonymized throughout the workflow and linked only via a unique identifier.

---

## Security Measures
- TLS 1.3 encrypted communication.
- Two-factor authentication and strong password policies.
- Role-based access control.
- Automated and manual penetration testing.
- Regular backups and disaster recovery processes in place.
- Sub-processors are vetted and subject to strict contractual security requirements.

---

## API and Integration
- RESTful API using JSON over HTTPS with API key or token-based authentication.
- Supports real-time upload, status checking, quality control feedback, and photo export.
- Kiosk mode for guided photo acquisition using iPads in locked-down state.

---

## Quality and Compliance
- End-user satisfaction: 4.9/5 rating from over 1.2 million reviews.
- Processing speed: <2 minutes average from link access to upload.
- Used by SBB, Migros, and multinational corporations for ID and badge photo workflows.
- Data security and quality practices align with ISO 27001 and OWASP Security by Design principles.

---

## Contact and Legal
- Legal form: Aktiengesellschaft (AG)
- UID: CHE-394.626.036
- VAT: CHE-394.626.036 MWST
- Insurance provider: AXA Versicherungen AG

For more information, contact: mail@photocollect.io