GDPR · ISO 27001 · EU hosting

Compliance, ready for your audits

YouBlur is built for regulatory compliance. Here is everything you need on data protection in your video and photo workflows.

Request a DPA See pricing

privacy-proof.json

{
  hosting   : EU (Scaleway)
  transit   : TLS 1.3
  rest      : AES-256
  retention : 24h max · ephemeral
  certs     : ISO 27001 · HDS
}

Compliant · DPA available

Compliance pillars

Infrastructure designed for GDPR requirements and data protection audits.

EU hosting

100% EU infrastructure (Scaleway, Paris/Amsterdam). No US sub-processor in the processing chain.

End-to-end encryption

TLS 1.3 in transit, AES-256 at rest. No biometric data stored, no detection coordinates retained.

Sub-processors & DPA

Scaleway (ISO 27001, HDS), Stripe (PCI DSS L1). A signed DPA is available on request for Enterprise accounts.

Retention & ephemeral mode

Automatic deletion within 24 hours. Ephemeral mode: immediate deletion after export.

DPIA checklist

If you process face-containing video at scale, here are the key points covered by YouBlur.

1Purpose
Anonymization to protect the privacy of filmed people.
2Minimization
Only relevant pixels are modified. No data extraction.
3Security
End-to-end encryption, EU hosting, automatic deletion.
4Proportionality
Irreversible blur, ensuring effective anonymization.

What we deliver

Documents and guarantees ready for your legal team or DPO.

DPASigned agreementAvailable on request for Enterprise customers.

SecurityTechnical briefTLS 1.3, AES-256, EU hosting, automatic deletion.

DPIAImpact assessmentHelp with your DPIA documentation.

AuditAnnual reviewAnnual review of our security measures.

Available for Pro and Enterprise customers after use-case validation.

Need a DPA or compliance audit?

Share your volumes, formats, and retention constraints. We will provide the documentation tailored to your case.

Request a DPA

Frequently asked questions

Is YouBlur GDPR-compliant?

Yes. EU hosting, TLS 1.3 + AES-256 encryption, automatic file deletion, no transfer outside the EU, DPA available.

Where are my files hosted?

In the European Union, on Scaleway infrastructure (Paris/Amsterdam). No non-EU sub-processor is involved.

How long are my files kept?

24 hours by default. Ephemeral mode allows immediate deletion after export.

Can I get a DPA?

Yes, a DPA is available on request for Enterprise customers.