MH MediaHarvester Web Context API
TRUST SECURITY DPA SOC 2

Trust and Security

We help developers extract and structure publicly accessible or authorized web data responsibly.

Compliance

No bypass promise

CAPTCHA, login wall, verification and access-denied states are reported instead of bypassed.

VERIFICATION_REQUIRED
Data

Project-specific database

Local development uses a dedicated SQLite database and production supports a new dedicated PostgreSQL URL.

MEDIAHARVESTER_DATABASE_URL
Security

API key required

All /api and /v1 routes require the localhost key; public Logo Link uses a separate public client id.

X-API-Key
Retention

Data retention controls

Cache, generated asset and request-log controls are exposed through the compliance API and documented for local and production use.

GET /v1/compliance/data-retention
Abuse

Abuse monitoring

Abuse reports can be recorded locally and reviewed through a dedicated monitoring endpoint.

POST /v1/compliance/abuse-report
Robots

Robots.txt respect option

Crawl and scrape endpoints can check robots.txt and return robots_disallowed instead of collecting a disallowed page.

respectRobots=true
SOC 2 Readiness notes, not certification

This page documents controls implemented in code. SOC 2 certification requires an external audit and is not claimed here.

Use authorized/public data sources and respect site policies, robots rules and customer agreements.

Trust resources