Templates, not photos
Images are processed to produce templates; the original image is not retained after processing.
Security & privacy
Security that respects the face behind the data.
How SIMSIM protects biometric data: minimisation by design, encryption, access control and deletion you can call from your code.
Encrypted in transit
All API traffic uses TLS. Plain-HTTP requests are refused.
Token authentication
Per-account API tokens, rotatable on request. Keep them server-side.
Deletion on demand
Delete a person and their templates with a single API call.
Least-privilege access
Production access is restricted to staff who need it, and logged.
Processor terms
A Data Processing Agreement is available for every paid plan.
Responsible disclosure
If you believe you've found a vulnerability, email security@sim-sim.io with steps to reproduce. Please don't access data that isn't yours or degrade the service. We'll acknowledge reports promptly and keep you updated. Our security.txt has the details.
Compliance documentation
Customers can request our DPA, sub-processor list and security questionnaire answers. See the Legal centre or contact us.
Ready to build on faces?
Create a free account, grab your token and make your first recognition call in minutes.