Trust & compliance
Designed for legal departments.
FIRMA's value is not a face. It is the proof that comes with it.
Identity and age verification
Every talent is checked by an independent KYC provider: official ID, liveness check, date of birth. No profile is published without double validation: identity verified, legal age verified.
Scope-based consent
Uses are split into levels (A, B, C). The talent consents to each separately. Level C requires a distinct addendum and is licensable only by verified Enterprise clients; no sample imagery is published.
Withdrawal policy
The talent may withdraw consent for future licences at any time. Ongoing licences run to term; no renewal is possible. Assets are then removed from the catalogue.
Content Credentials on outputs
Our workflows embed C2PA metadata linking every produced image to its licence and original talent.
Data protection
European hosting, GDPR compliance, separated and encrypted identity data, restricted and logged access. Consent documents are timestamped and hashed (SHA-256).
Logging & per-client fingerprinting
Every download is logged: date, licence, IP address, user. Every delivered file carries a client-unique fingerprint to trace any leak to its source.