Control Access
Who can see what, and how. From workspace logins to client-facing galleries — access is deliberate, not accidental.
- Two-Factor Authentication
- Controlled Sharing with PIN & Client Portal
- Cookie & Tracking Control
Trust & Security
Security, compliance, and transparency built into every workflow.
Your clients trust you with their images, videos, and data. Exportlab gives you the tools to justify that trust.
Trace Actions
Know what happened, when, and who did it. Audit logs, usage tracking, and clean deletion — accountability baked in.
- Audit Logs
- Usage Logs for Storage Changes
- Workspace-Level Data Deletion
Protect Data
Encrypted in transit, isolated per tenant, secured at the API layer. No cross-tenant access, no exceptions.
- Encrypted Data Transmission (TLS)
- Tenant Isolation by Design
- Server-to-Server API Security
Under the hood
For the engineers and IT teams who want specifics.
- Encrypted Data Transmission (TLS)
- All data in transit is encrypted with industry-standard TLS, protecting information exchanged between clients and our API against interception and tampering.
- Tenant Isolation by Design
- Workspaces are strictly separated per tenant. Requests are validated against the respective tenant context so uploads, API access, and media paths cannot be used across tenants.
- Server-to-Server API Security
- API access is tenant-scoped and requires an API key and tenant header. Requests are rate-limited, and media links are issued as signed URLs that expire automatically.
- Time-Limited Media Access
- Uploads and media requests use signed URLs. Upload URLs are short-lived; API media links expire automatically and should not be stored permanently.
- Two-Factor Authentication
- Admin accounts can be protected with an authenticator app. This keeps workspaces better secured even if a password is compromised.
- Controlled Sharing with PIN & Client Portal
- Galleries, transfers, and client access can be secured with PIN protection, separate client accounts, and clear per-project visibility.
- Audit Logs
- Significant workspace actions are recorded as audit logs — including actor, resource, timestamp, and result. Logs can be filtered and traced back up to 365 days.
- Usage Logs for Storage Changes
- Uploads, deletions, and processing steps are surfaced as usage logs. Teams can trace what drives storage growth or reduction.
- Cookie & Tracking Control
- Optional services like analytics are only activated after consent. Essential cookies and local storage are documented and made transparent via the Cookie Policy.
- Workspace-Level Data Deletion
- Exportlab supports permanent deletion of a workspace including associated metadata, media, user accounts, and face-recognition data.
Security that fits creative work
Exportlab keeps your client data, media, and workflows protected — without getting in your way.
app.exportlab.io
Home
Search or jump to...⌘K
Good morning, Max 👋
Search pages, help, actions...
Photos
12,840
248 new
Videos
18
6 in review
Storage
128 GB
64% of plan
Recent galleries
Latest workspace activity
Projects
Studio Campaign
248 photos
Launch Film
02:14 review
Brand Assets
36 files