A UGC platform holds more than video files. It holds creator identities, briefs for products that are not public yet, payment records and the rights records your legal team relies on. This page describes how UgcModels protects that information, which controls each plan includes, and what your security team receives when it reviews us. It lists only what we actually do.
Every account signs in with a one time 6 digit code sent to the account email. Codes expire quickly, and repeated wrong attempts pause sign in for a short time. There is no reusable password stored for the account, so there is no password for anyone to guess or reuse from another breach. Sessions end after a period of inactivity and can be ended from the account at any time.
Enterprise workspaces connect UgcModels to your identity provider through SAML. Your team signs in with company credentials, your provider enforces its own multi factor rules, and removing someone from your directory removes their access to the workspace. You can require SSO for every seat, so nobody on your domain signs in another way.
Shot list
Hooks
Not everyone who sees creators should be able to spend money or change rights. Enterprise splits the work into roles, and each seat gets exactly one.
| Role | What it can do |
|---|---|
| Owner | Manages the plan, billing, SSO settings and every other role |
| Admin | Adds and removes seats, assigns roles, manages workspaces |
| Buyer | Searches, builds shortlists, sends casting calls and books orders |
| Reviewer | Watches deliveries, approves or asks for revisions, cannot book |
| Finance | Sees invoices, order totals and payment status, cannot book or approve |
| Viewer | Searches the roster and reads shortlists, cannot book, approve or export |
On Scale, agencies share deliveries with clients through approval links, so a client can sign off on a clip without holding a seat in the workspace.
Enterprise records who did what and when. Each entry shows the person, the action, the affected order or asset, the time and the network address. You can filter the log by person, action or date and export it for your own records.
We collect what the service needs and nothing for resale. Account emails, workspace settings, briefs, messages, delivered files, order totals and rights records are used to run orders and are never sold or shared with advertisers. All traffic to the site and the account area is encrypted in transit. Access to production data on our side is limited to the people who operate the service and is logged.
Creators pass an ID check and a live selfie before their profile goes live. Brands never see the document, the legal name or the date of birth. They see a display name, an age band (21 to 29, 30 to 39 or 40+) and the comp card fields the creator chose to fill in. The document image and the selfie are deleted once the check is complete. We keep the result of the check, the date it was done and the age band.
Card payments are processed by our payment provider. Full card numbers never reach our servers, and we store only what we need to show an invoice, such as the last digits of the card and the payment status.
Briefs and files sit inside the order and are visible only to the brand workspace, the booked creator and, on Scale and Enterprise, the client who received an approval link. Unreleased products in your briefs stay between you and the creators you booked. Details on retention and your rights over personal data are in the privacy policy.
Enterprise includes a written service level of 99.9 percent monthly uptime for search, orders and the account area. Planned maintenance is announced to workspace admins in advance and scheduled outside US business hours. If we miss the level in a month, the SLA terms set out the service credit your workspace receives.
Enterprise buyers get a security review pack before they commit, so procurement does not stall on a blank questionnaire. It contains answers to a standard vendor security questionnaire, a description of how data moves through an order, the categories of service providers we rely on (hosting, payments, email delivery), our incident response steps and the SLA terms. We do not claim certifications we do not hold, and the pack says plainly which ones those are. Request it from inside your account before you choose Enterprise, and your security team can review it first.
| Control | Starter | Growth | Scale | Enterprise |
|---|---|---|---|---|
| Sign in with an emailed code | Yes | Yes | Yes | Yes |
| Seats | 1 | 3 | 10 | 25 |
| Client approval links | No | No | Yes | Yes |
| Usage rights records | Yes | Yes | Yes, with bulk export | Yes, with API export |
| SSO with SAML | No | No | No | Yes |
| Roles and permissions | No | No | No | Yes |
| Audit log | No | No | No | Yes |
| 99.9 percent uptime SLA | No | No | No | Yes |
| Security review pack | No | No | No | Yes |
Prices and every other feature are on the UGC creator pricing page.
If you believe you found a vulnerability or saw someone else's data, email support@ugcmodels.com with the steps to reproduce it. Please do not access more data than you need to show the problem. We reply to security reports with priority and tell you when the fix is in place.
No. SSO with SAML, roles and permissions and the audit log are part of Enterprise, which also covers 25 seats and 25 workspaces.
No. Brands never see ID documents. The image is deleted after the check, and only the result and the age band remain.
In the privacy policy and the terms. The FAQ also answers common questions about safety on the platform.
No. Briefs and delivered files are used only to run your orders and are visible only to the people in that order.
Enterprise adds SSO, roles, an audit log, a 99.9 percent SLA and a review pack, from USD 499 per month billed yearly.
Search stays open without an account. With one, you see matching creators, save shortlists and download casting briefs.