Trust
Your photographs.Your clients’ trust. Protected.
A photo archive is a decade of someone’s life. Hotshoe is built so that data stays yours — analysed on our own infrastructure, access-controlled, and audit-logged end to end.
01
On-platform AI
Your photos are never shipped to a third-party AI cloud.
Culling, semantic search and face recognition run on Hotshoe’s own infrastructure — not a third-party vision API. The models that read your frames live where your photos live, so client work is never handed to an outside AI vendor to process. AI can be scoped or disabled by an administrator at any time.
02
Access control
Role-based access, approvals and API keys.
Accounts carry roles, new users are approved before they’re active, and every session can be revoked with “sign out everywhere”. Programmatic access uses scoped API keys you can label, expire and revoke independently of your password. Passwords are hashed with Argon2id; reset links are single-use and short-lived.
03
Audit trail
Who did what, when — on the record.
Administrative actions are written to an audit log with the actor and source IP. Contract signatures are bound to the exact document text with an integrity hash and a created → sent → viewed → signed trail — timestamped, with IP and device. Nothing important happens without a record you can point to.
04
Sharing
Every link is yours to control.
Share links are public, password-protected or scoped to specific people. Downloads are allowed or withheld per link, and any link can be revoked instantly without deleting the gallery behind it. SSO, two-factor authentication and one-click data export are on the roadmap.
Built to be trustedwith the work of a lifetime.
Bring one real job and see how it’s handled, end to end.