Security

    Last updated June 10, 2026

    Protecting your data is core to a service built around sensitive content. This page summarizes our approach. A free scan should feel safe — it does not require uploading private content.

    Data in transit and at rest

    Connections to openDMCA are encrypted in transit using TLS. Account and operational data is stored on managed, access-controlled infrastructure provided by our hosting subprocessor.

    Scan and evidence handling

    Username scans do not require private-content uploads. When evidence is captured to support a takedown, it is access-controlled and retained only as needed to pursue and document the request.

    Payment security

    Payments are processed by a PCI-DSS compliant payment provider. We never see or store your full card details.

    Names on notices

    By default each notice carries the creator's legal name and signature, because a valid DMCA notice must identify the copyright owner or an authorized agent. An agency can turn on anonymous filing and sign under its own legal name as the creator's authorized agent, which keeps the creator's name off the notice. The notice does not include a home address.

    Reporting a vulnerability

    If you believe you have found a security issue, please email security@opendmca.com so we can investigate promptly. Please give us a reasonable opportunity to respond before any public disclosure. You can also reach us by mail at:

    • FounderGem LLC c/o
    • 1309 Coffeen Avenue STE 1200
    • Sheridan, WY 82801
    • United States
    • Email: security@opendmca.com