Security & Data Protection

Every wedding is a once-in-a-lifetime event, and the content captured cannot be re-shot. We treat client media as irreplaceable and engineer our systems accordingly.

All uploads are encrypted in transit using TLS 1.2+ and at rest using AES-256. Authentication tokens, session credentials, and payment information are encrypted end-to-end.

Files are stored in geographically redundant cloud infrastructure with strict access controls, isolated buckets per workspace, and signed URLs for delivery.

Role-based access ensures that only the creator and the clients they explicitly invite can access a gallery. Galleries can be password-protected, expiring, or revoked at any time.

Aisle runs on globally distributed edge infrastructure with automatic failover, regional redundancy, and continuous monitoring — engineered for wedding-day uptime.

We support strong passwords, single sign-on via Google, and session controls. Suspicious activity triggers re-authentication and creator notifications.

All client content is replicated and continuously backed up. In the rare event of an incident, recovery is automatic and creators retain access to every file they have uploaded.

Aisle targets 99.9% monthly uptime for delivery and gallery endpoints. Live status, scheduled maintenance, and incident history are published at aisle.studio/status.

Aisle is built with GDPR-aware data handling. Creators and couples can request data export or deletion at any time. We do not sell personal data, and we limit subprocessors to the cloud infrastructure required to run the product. See our privacy policy.

If you believe you have found a security vulnerability, please email hello@aisle.studio. We acknowledge reports within two business days and work in good faith with researchers who follow coordinated disclosure.