Security & certifications

Independent security grades

These grades are issued by independent scanning services and reflect our production site at snapaclick.com. Select “Verify” to run the scan again at any time.

Grades last confirmed 30 October 2026.

Encryption & transport

Traffic to snapaclick is encrypted end to end, and your photo gets a second layer of encryption on top of HTTPS.

Continuous security testing

Every change is checked automatically before it reaches production, and the running service is tested regularly against a production-identical build:

• Dependency scanning — third-party packages are checked for known vulnerabilities on every build (currently zero).
• Static analysis (SAST) — the source code is scanned for insecure patterns.
• Container scanning — the production image is scanned for operating-system and package vulnerabilities (zero critical or high).
• Secret scanning — the code history is checked so no credential is ever committed.
• Black-box penetration testing — dozens of automated attack checks covering security headers, information disclosure, access control, authentication, brute-force lockouts, injection and replay.
• Load & stability testing — sustained concurrent load handled with zero failed requests.

Data protection & privacy

• UK/EU data residency — your data is stored and processed in the UK/EU.
• UK GDPR — Sabtech Limited is the data controller, registered with the Information Commissioner’s Office (registration ZC190564).
• No AI training — your photo is never used to train AI models, for advertising or for facial recognition.
• Automatic deletion — finished photos are deleted after printing (or within 72 hours); your original is kept encrypted only for the free-retake window, then deleted.
• Responsible disclosure — researchers can report issues via our security.txt.
• Assurance documents — a Data Processing Agreement, security questionnaire and penetration-test summary are available to business customers on request.