Security

NSFWGuard is built with a privacy-first architecture. All data is encrypted in transit, processed in volatile memory, and purged immediately after classification.

Encryption

• All API traffic is encrypted using TLS 1.3
• API keys are hashed with SHA-256 — we never store raw keys
• Database connections use SSL with certificate verification

Data Handling

• Images are resized to 224×224 in memory and processed immediately
• Temporary files are deleted after classification
• Results are stored in Redis with a 1-hour TTL, then purged
• We do not store image content — only metadata for billing