Security Statement.

1. Security approach

We use reasonable administrative, technical, and organizational safeguards appropriate to the size and scope of the service. No system can be guaranteed completely secure, and this statement does not claim a formal certification or eliminate the risks inherent in online services.

2. Access minimization

• We request connected-platform permissions only for approved service functions.
• Client access should be role-based and limited to the people and systems that need it.
• Connected access may be revoked by the client at any time.
• Access is reviewed when a service changes or an engagement ends.

3. Service providers

DermodyAI may rely on established hosting, automation, analytics, communications, security, and AI providers to deliver a service. Those providers operate under their own security programs, terms, and privacy policies. The specific provider set depends on the client’s approved workflow.

4. Connected accounts and credentials

Clients should use official account roles, OAuth connections, or vendor-supported credential methods whenever available. Credentials and access tokens should not be sent through unsecured messages. If a connected account is no longer needed, the authorization should be revoked and the stored connection removed.

5. Human review

AI-assisted output may be inaccurate. Material claims, regulated content, customer-facing decisions, legal language, financial information, and sensitive actions should be reviewed by an authorized person before use or publication.

6. Public website safeguards

This website uses HTTPS through its hosting provider and sends browser security headers intended to reduce common web risks. Public portfolio pages are designed to avoid exposing client credentials, access tokens, or private operating data.

7. Reporting a security concern

If you believe you found a vulnerability or security issue affecting DermodyAI, please report it privately and include the affected page or service, a clear description, steps to reproduce, and any relevant screenshots. Do not access, alter, retain, or share data that does not belong to you.

8. Related pages

Read the Privacy Policy, Terms of Service, and Data Deletion Instructions for information about data handling, service terms, and deletion requests.