Security

At Eythos, keeping your collection data secure and confidential is our highest priority. Sesame is built from the ground up with modern security practices to protect your information, control access, and ensure complete data privacy.

Passwordless authentication & passkeys

To eliminate the risks associated with weak or compromised passwords, Sesame uses a passwordless sign-in architecture:

• One-time passwords (OTP): When you first log in or set up an account, Sesame sends a secure, temporary code directly to your email.

• Biometric passkeys: During onboarding, you will be guided to set up a passkey on your device (such as Face ID, Touch ID, or Windows Hello). Passkeys provide frictionless, highly secure access that safeguards your account against phishing attempts.

End-to-end encryption & data privacy

Your collection metadata and uploaded files are protected by end-to-end encryption, ensuring that private information remains strictly accessible to authorized users.

Strict physical & digital access controls

We enforce tight operational boundaries between your Sesame digital workspace and our physical storage management:

• Stored assets: For artworks physically stored in an Eythos facility, access is restricted strictly to your designated Client Relations (CR) Manager to facilitate logistics, intake, and handling.

• Non-Eythos assets: Eythos staff have zero access to artworks you manually add to Sesame that are stored outside our facilities.

• On-demand service access: We only access data for non-stored items if you explicitly request related services through Sesame—such as framing, transport, art handling, or installation.