Security for studios, agencies and brand teams
Security at PostModels covers the account, the team and the data. Studio teams get single sign-on with Google Workspace or SAML, roles and permissions, an audit log, an uptime SLA and a DPA in the panel. Every plan gets encryption in transit and at rest, strict access controls and regular backups.
- Adults 18+ only.
- Every model is ID and age verified.
- Every brand is a verified, paying business.
01
Single sign-on keeps access tied to your company directory
On the Studio plan, your team signs in with Google Workspace or any SAML identity provider. When someone joins, they get access through your directory. When someone leaves, removing them there removes their access to PostModels. You can require single sign-on for everyone on the account so no one keeps a separate password. Every account, on every plan, signs up with a code sent to email, so no one can open an account in someone else's name.
02
Roles decide who can see and change what
Studio includes 15 seats with roles and permissions. Owners manage billing, seats and security settings. Producers create castings, review applicants, shortlist, message and book. Viewers see castings and shortlists without changing them. The Agency plan includes 5 seats with owner, producer and viewer roles.
03
The audit log shows who did what and when
Studio accounts have an audit log of team actions: sign-ins, castings published and closed, shortlists shared and unshared, bookings sent and accepted, payments, seat changes and changes to security settings. Each entry shows the person, the action, the time and the item it touched. Owners can review the log at any time from the panel.
04
Your data is encrypted and access to it is limited
- All traffic to and from PostModels uses encrypted connections (TLS)
- Data is encrypted at rest, including uploaded photos, videos and agreements
- Identity documents are handled by a specialist verification provider. We keep the verification result, not a copy of the ID on your profile
- Birth dates are private and never shown to brands
- Staff access to production systems is limited to the people who need it, protected with strong authentication and logged
- Passwords are stored as salted hashes, never in plain text
- Payment card details are handled by our payment processor and never stored on our servers
05
Backups and uptime you can plan around
Databases are backed up every day and backups are encrypted and kept in a separate location. We test restores regularly. Studio includes an uptime SLA for the core service: casting board, applications, messaging, bookings and payments. The SLA terms are in the panel for Studio owners. Data is hosted with an established hosting provider in professionally run data centers.
06
Paperwork for your security and legal review
Studio owners find these in the panel, ready to send to IT, legal or procurement:
We do not claim certifications we do not hold. If your review needs a questionnaire answered, send it to [email protected] and we answer in writing.
- Security overview describing how PostModels protects accounts and data
- Data processing agreement (DPA) you can sign from the panel
- Uptime SLA
- Annual invoice for your finance team
07
Every account is protected, not only Studio
Security is not only a Studio feature. Every account signs up with a code sent to email, every brand account is verified against its business email domain or website, and every model passes ID and age verification before the profile goes live. Booking payments are held by the platform, so no one on PostModels has to share bank details with a stranger. Read more about how this protects people on model safety.
08
Responsible disclosure
If you find a security issue in PostModels, email [email protected] with the details and steps to reproduce. Please do not access other people's data, run tests that degrade the service, or share the issue publicly before we have fixed it. We reply to every report, keep you posted while we fix it, and credit you if you want.
09
Related pages
Read about model safety and verification, compare plans on the pricing page, or see how agencies use roles and shareable shortlists. Our privacy policy explains what data we collect and why.