imgix

Imgix does not charge one-time setup fees—you can begin with a free trial that includes 30 days and 100 credits without needing a credit card. Ongoing costs follow a credit-based billing model, covering image transformations, bandwidth, and cache storage. Optional add-ons include the Video API (~$10/month) and Advanced Security features (~$50/month), applicable on Pro or Premium plans. There are no explicit maintenance or technical support charges outside of the monthly plan or credits, although Enterprise customers may negotiate custom support terms or SLAs. Overages beyond your credit allocation are billed per GB in line with plan rates.

Imgix supports new users through:

• Comprehensive Documentation: Detailed Quick Start guides, setup tutorials, and API references lead users through onboarding—from origin setup to smart transformations.

• User Account Management: Role-based user permissions and SSO ensure proper onboarding and secure access control.

• Support Channels: Free-tier and paying customers have access to email support, while Enterprise users gain dedicated account managers and priority support.

• Interactive Sandbox & SDKs: Real-time parameter testing in the sandbox and SDKs for various languages (JS, Python, Ruby, etc.) accelerate practical learning without setup time.

Imgix does not provide formal instructor-led training, but its ecosystem offers self-guided resources, tutorial content, and responsive community/support teams to assist during onboarding.

Imgix implements robust security and compliance measures:

• Encryption & Credential Management: All sensitive credentials (e.g., S3 keys) are encrypted using industry-standard algorithms. Billing data is handled via Stripe, so Imgix never stores credit card information.

• Authentication & Access Control: Supports role-based permissions, SSO via SAML/SSO providers, and secure password hashing to ensure controlled access.

• Compliance Frameworks: Fully GDPR-compliant under the Data Privacy Framework, SOC 2-certified, and maintains yearly penetration testing. Enterprise customers can request SOC 2 reports or pen-test results under NDA.

• Secure Logs and Data Retention: Logs are stored securely for up to 90 days. Account data can be purged on request, and users maintain control over their stored information.

• Operational Security: Imgix undergoes yearly security audits and penetration testing, and enterprise clients may request additional audits. They also offer signed URLs and IP allowlists as part of their advanced security features.

These layered protections—from secure credentials and encryption to compliance and regular security reviews—provide a strong foundation for data privacy and operational security.

Imgix operates on a continuous deployment model, meaning updates are rolled out regularly rather than on fixed release cycles. These updates include improvements to the Rendering API, new transformation parameters, SDK enhancements, and security patches. Most changes are backward-compatible and require no user intervention. Imgix communicates major updates through its changelog, developer documentation, and email notifications for enterprise clients. Because the platform is cloud-based, updates are applied automatically—users always access the latest version without manual upgrades or downtime.

Imgix follows a customer-first data ownership policy:

• Ownership: All original assets remain under the customer’s control in their own storage (e.g., S3, GCS). Imgix only processes and caches derivatives for delivery.

• Portability: Customers can disconnect sources at any time and retain full control over their origin files. Imgix does not lock assets into proprietary formats; transformations are URL-based and stateless, so there’s no dependency on stored variants.

• Data Deletion: Users can purge cached images globally and request account deletion, ensuring compliance with GDPR and SOC 2 standards.

Imgix offers flexible, usage-based scaling:

• Credit Model: Plans are based on monthly credits covering bandwidth, cache storage, and transformations. Scaling up means purchasing additional credits or moving to a higher tier; scaling down is as simple as reducing usage or downgrading plans.

• No Long-Term Lock-In: Monthly billing allows organizations to adjust capacity as traffic fluctuates. Enterprise agreements can include custom SLAs for predictable scaling.

• Automatic Elasticity: The CDN and processing infrastructure scale automatically to handle spikes without manual provisioning.

• Add-On Features: Advanced options like Video API or AI tools can be enabled or disabled as needed, giving businesses granular control over costs and capabilities.

• Automatic Renewal: Imgix billing cycles renew automatically every month unless cancelled.

• Cancellation Method: Users may cancel at any time via the dashboard or by emailing support; the cancellation typically takes effect at the end of the current billing cycle.

• Refund Policy: All sales are final—Imgix does not issue refunds for unused portions of a billing period, although fees are prorated when termination is initiated by Imgix or under certain circumstances.

• Notification of Price Changes: Imgix reserves the right to modify pricing or fees. They must provide 30 days’ advance notice via registered contact information. Customers can then choose to renew, cancel, or change plans.

• Minimum Monthly Payment: Every plan includes a baseline minimum monthly fee. If usage is below this minimum, the baseline fee still applies; any excess usage is billed on top.

• Proration on Plan Changes: Upgrading mid-cycle results in prorated charges for the remainder of the billing period.

Imgix meets several key industry compliance standards to ensure data security and privacy:

• GDPR Compliance through the U.S.–EU Data Privacy Framework.

• SOC 2 Compliance: Validated by independent audits; premium/enterprise customers can request reports under NDA.

• Annual Penetration Testing: Imgix conducts yearly security assessments; results available to premium clients.

• Secure Credential Management: Encrypts private keys (e.g., S3 credentials) at rest using industry-standard algorithms; billing information is managed separately through Stripe.

• Logging and Retention: Stores operational logs securely for up to 90 days; account deletion removes associated data per GDPR/SOC 2 guidelines.

• Further Compliance Support: Offers custom security questionnaires and scope discussions (e.g., penetration testing or SOC 2 report access) for enterprise users via account managers.

These terms and policies ensure Imgix remains transparent, flexible, and secure for both standard and enterprise-level customers.