Volta stores its database and files in the European Union, copies every studio's work each night to a locked backup in a second European location where nothing can be changed or deleted for 30 days, and can restore one studio or one project without touching anyone else. Studios are kept apart on every request, two-factor sign-in is available to everyone and can be required by a studio, every opening of an original file is logged, and nothing a studio makes is used to train AI or shown without permission.
Where your data lives.
The database runs in Ireland and the files and backups are stored in European locations, so a studio's work stays in the European Union. The services that process data for Volta, and what each one does, are listed in the Studio Agreement and the Privacy Policy, and studios are told before a new one is added.
Backed up every night.
Every night a studio's files, documents, team and settings are copied to a locked backup in a second European location, separate from the live files, where nothing can be changed or deleted for 30 days by anyone. Volta can restore the whole studio, or one project, from any of those nights: only that studio is touched, nothing made since is removed, and a copy of how it was just before is kept so a restore can be undone. An encrypted copy of the whole database is kept as well, for rebuilding the service after a disaster.
Who can see what.
Every request for a project or a file is checked against the studio it belongs to, the member's role and the parts of the project they work in, so one studio can never reach another's work and a writer kept to the script never opens the cut. Links to a studio's files expire within an hour, and a client invited to review sees only what they are sent.
Signing in.
Two-factor sign-in is available to every account and a studio can require it for all its members. Recovery codes and a second device get a member back in without writing to support, and a studio's owner can reset a member who has lost both. Volta's own staff cannot reach the console without their second factor.
A record of what happened.
A studio sees its own activity: who joined, who changed a role, a budget or a setting, and every time an original file was opened or downloaded. Every action Volta's staff take on an account is logged, and anything Volta restores for a studio appears in that studio's activity.
Your work stays yours.
Volta never trains AI models on what you make, never sells it, and never shows it in marketing without written permission. You can export everything as ordinary files at any time, a deleted project waits 30 days before it is gone, and deleted work leaves the backups within 31 days.
The agreement behind it.
A studio's owner signs the Volta Studio Agreement for the business. It includes the GDPR data processing terms, the list of sub-processors, the security measures, the backup policy and notice of a breach within 72 hours, under the law of the Republic of Cyprus.
Common questions
Where does Volta store my data?
In the European Union: the database in Ireland, and files and backups in European locations. The services that process data for Volta are listed in the Studio Agreement and the Privacy Policy.
How is a studio's work backed up?
Every night its files, documents, team and settings are copied to a locked backup in a second European location and kept for 30 days. Nothing in it can be changed or deleted early, and Volta can restore the whole studio or one project from any of those nights without touching other accounts.
Does Volta train AI on my work?
No. What you write, upload and generate is never used to train AI models, never sold, and never shown in Volta's marketing without your written permission. A prompt goes to a model's host only to make the generation you asked for, under API terms that do not allow training on it.
Can Volta staff see my projects?
Only when support or the law requires it, through a console that needs the staff member's own second factor, and every such action is logged. A restore Volta makes for a studio is written into that studio's activity.
Can a studio require two-factor sign-in?
Yes. A studio's owner or admin can require it for every member. Members can set up more than one device and keep recovery codes, and the owner can reset a member who has lost both.
Is there a data processing agreement?
Yes. It is part of the Volta Studio Agreement that a studio's owner signs for the business, with the sub-processors, the security measures and breach notice within 72 hours. The full text is public on the Studio agreement page.
How do I report a security problem?
Write to support@voltastudio.app with "Security" in the subject. A person reads every report, and the address is also published in the site's security.txt.