Security
Your garments, your models, your images — yours. Protected at every step of production.
Data protection
02Data protection, the way enterprise buyers expect it.
Genera.Space is operated by Evolox, Inc. Under GDPR and UK GDPR we act as controller for end-user data and as processor for the personal data our business customers supply — with a Data Processing Addendum available to every customer on request.
Customer data is primarily stored and processed in regions compatible with GDPR, generally within the EEA. Where a plan requires processing outside the EEA or UK, transfers rest on the EU Standard Contractual Clauses and the UK IDTA, with encryption and access controls on top.
Security measures
03Security, in practice
- 01Encryption in transit and at rest
- 02Least-privilege access control
- 03Authentication and audit logging
- 04Vulnerability management and backups
- 05Incident response procedures
- 06Payments processed by Stripe — PCI DSS compliant, no card numbers stored
Content ownership
04You own what you make here.
Every image generated on the platform belongs to the customer: the License Agreement assigns all right, title and interest in Output Content to you, and you keep all ownership rights in everything you upload. Outputs are cleared for digital, print and broadcast use.
The models are as clean as the images: AI fashion models are built ethically and rights-cleared, with no real person’s likeness used without a lawful basis — so a campaign produced on Genera carries no hidden model-release risk.
Infrastructure
05Infrastructure & subprocessors
- 01Google Cloud Platform — hosting and infrastructure
- 02Google Firebase — application platform
- 03Stripe — payment processing (PCI DSS)
- 04Runpod — compute for model workloads
- 05Hostkey — compute and hosting
- 06Google Analytics — usage analytics, consent-based in the EEA/UK
FAQs
06Who owns the images Genera generates for us?
You do. The License Agreement assigns all right, title and interest in Output Content to the customer, and you retain all ownership rights in the materials you upload. Outputs are licensed for digital, print and broadcast use.
Do you offer a Data Processing Addendum (DPA)?
Yes — a DPA is available to every business customer on request. Write to [email protected] and our team will send it over.
Where is our data stored?
Primarily in regions compatible with GDPR, generally within the EEA. Where processing happens outside the EEA/UK, it rests on the EU Standard Contractual Clauses and the UK IDTA, with encryption in transit and at rest.
Is Genera GDPR compliant?
Genera is built around GDPR and UK GDPR: we act as controller for end-user data and as processor for personal data supplied by business customers, honour access, rectification, erasure and portability rights, and respond to requests within the statutory timelines.
How is our data used for model training?
Inputs and outputs may be used to improve the quality of your own results and of the platform, as set out in the License Agreement. Enterprise agreements are negotiated individually — talk to us about the terms your team needs.
How do you keep the platform secure?
Industry-standard measures across the stack: encryption in transit and at rest, least-privilege access control, authentication and audit logging, vulnerability management, backups, and incident response procedures.