Platform
Checking your session…

Picsart API Platform Trust Center

Security and privacy, built into every API call

How Picsart protects the data you send to the API Platform: independent audits, the controls behind them, and every third party that touches customer data.

Security & quality at a glance

  • Security

    We build Picsart with global security standards in mind, offering enterprise-grade security across all aspects of how developers integrate and run Picsart services.

  • Privacy & governance

    Picsart’s policies, tools, and procedures are built to protect your data and help you meet global privacy obligations.

  • Compliance

    We comply with leading global regulations like the GDPR and CCPA and always keep up with the latest regulations and requirements.

  • Restricted content policy

    Enterprise-grade safeguards: automated filters, AI detection, keyword and hash scanning, human review, and real-time prompt screening; violations removed.

  • Insurance policy

    Picsart maintains an industry-standard insurance policy to provide coverage for incidents where we may be legally bound.

Compliance

  • SOC 2 Type 2Annual SSAE 18 audit by an independent firm
  • SOC 3Public summary of the SOC 2 audit
  • ISO/IEC 27001:2022Certified information security management
  • GDPREU General Data Protection Regulation
  • CCPA / CPRACalifornia consumer privacy law

Documents

Controls

Full security policy →

Infrastructure security

  • Encryption at restCustomer data is encrypted at rest with AES-256.
  • Encryption in transitAll traffic is encrypted with TLS 1.2 or higher.
  • Network securityFirewalls, IDS/IPS, network segmentation and DDoS protection; public addresses reviewed quarterly.

Product security

  • Data isolationEach customer's data is logically separated from every other customer's.
  • Penetration testingAnnual third-party penetration tests against OWASP and OSSTMM.
  • Vulnerability disclosureA public bug bounty program runs on HackerOne.

Organizational security

  • Role-based access controlAccess is granted on least privilege and reviewed regularly.
  • OffboardingAccess to systems and customer data is revoked when a person leaves.
  • Device securityCompany devices use full-disk encryption and MDM with remote wipe.

Monitoring & response

  • Logging and monitoringCentralized logs with threat detection and alerting to on-call teams.
  • Incident responsePotential incidents page an on-call responder and follow a documented process.
  • Quality controlManual, automated, API, regression and performance testing on every release.

Data & privacy

  • Privacy by designPrivacy is reviewed from the start of the development lifecycle.
  • GDPR and CCPAProcessing follows GDPR and CCPA/CPRA, with a DPA available to every customer.
  • Subprocessor noticeRegistered developers can be notified when subprocessors are added or removed.

Ethical AI use and responsible innovation

At Picsart, our AI-driven tools are designed with a foundational commitment to ethics, safety, and user empowerment. We prioritize:

  1. 01

    Human-centered design & empowerment

    Our AI enhances, rather than replaces, human creativity and choice. It serves as a supportive tool, allowing users to maintain control over content and artistic direction.

  2. 02

    Consent & privacy

    We uphold users’ rights by ensuring proper consent and privacy in all data and likeness usage.

  3. 03

    Content safety & moderation

    Advanced filtering systems, combined with human oversight, are implemented to prevent misuse or creation of harmful content.

  4. 04

    Transparency & accountability

    We strive for clarity in our AI’s functionality, decisions, and limitations to foster user understanding and trust.

  5. 05

    Fairness & bias mitigation

    Proactive measures are taken to identify and reduce biases in our models, ensuring equitable and respectful outputs.

  6. 06

    Sustainability

    We consider the environmental impact of AI operations and aim to align with sustainable computing practices.

  7. 07

    Cultural respect & representation

    Our AI systems are developed with cultural sensitivity, avoiding harmful stereotypes and honoring diverse identities.

  8. 08

    Ethical governance & continuous oversight

    Our AI development follows ongoing internal assessments, participatory processes, and safeguards to align with evolving ethical standards.

This ethical framework guides the design, deployment, and continuous refinement of Picsart’s AI tools, ensuring they remain responsible, inclusive, and aligned with users’ values.

Quality control

Picsart delivers quality products through its comprehensive software testing services: requirements analysis, test planning, test design, and different types of testing for Web, Mobile, and Desktop products. Automated testing reduces regression testing costs and accelerates release cycles.

Manual testing ensures the early detection of bugs without disrupting project development, and API testing guarantees easy integration and bug-free performance. Regression testing relieves teams during peak load situations and prevents customer complaints.

Web testing enhances application stability and security through functional, UI, usability, and performance testing, as well as vulnerability assessment. Performance testing ensures scalability, stability, and optimal performance, identifying bottlenecks and peak load limits on devices.

Subprocessors

View all 33 →

Third parties that process customer data to deliver and maintain the Picsart API Platform.

  • Cloudflare, Inc.Content delivery network; platform security as a service
  • Deft / ServerCentral (ServerCentral, LLC dba Deft.com)Cloud infrastructure as a service
  • Amazon Web Services, Inc.Cloud service provider
  • Datadog, Inc.Cloud infrastructure monitoring and security as a service
  • Google Cloud Platform (Google LLC)Cloud service provider
  • Google Kubernetes Engine (Google Cloud Platform; Google LLC)Cloud service provider; application management
  • Atlassian PTY Ltd.Customer support (Jira, Confluence)
  • HubSpot, Inc.Cloud customer relationship management platform

FAQ

Picsart holds a SOC 2 Type 2 report from an annual SSAE 18 audit, a public SOC 3 report and ISO/IEC 27001:2022 certification, and complies with GDPR and CCPA/CPRA.