How Score Protects Your Uploaded Images

Location Metadata Is Removed

EXIF data — including GPS coordinates from phone photos — is stripped automatically on upload. A photo taken at your office will not reveal that location to recipients.

Files Are Verified by Content, Not Filename

Uploads are checked against their actual file content, not just the file extension. A non-image file renamed with an image extension is rejected.

Every Image Is Re-Processed

Every uploaded image is re-processed on upload, which removes anything hidden inside the original file.

Unguessable Addresses

Images are stored under random identifiers. Nobody can browse or enumerate your image library, and the storage location itself returns nothing if accessed directly.

Organization Isolation

No organization can see another organization's images. Storage is isolated per organization, the same as contacts, campaigns, and every other type of data in Score CRM. See Data Privacy.

Served Over HTTPS

Images are served over HTTPS from a global CDN, the same as the rest of Score CRM.