§ 01 / TRUST CENTER
Security is not a feature. It's our foundation.
Built on standard encryption, transparent data handling, and a strict retention policy. We treat your data the way we'd want ours treated.
TRUST SCORE
Privacy-first
§ 02 / COMMITMENTS
Privacy by default.
We follow privacy laws, encrypt your data, and never sell or share it. Period.
GDPR Aligned
Built to comply with EU data protection law.
CCPA Aligned
California Consumer Privacy Act compliant.
PCI via Stripe
Payment data handled by Stripe (PCI DSS Level 1).
§ 03 / LIFECYCLE
Your data's journey, end to end.
01
Upload
Encrypted in transit
02
Verify
Processed securely
03
Delivered
Signed download link
04
Retained
Short retention window
05
Purged
Permanent deletion
§ 04 / ENCRYPTION
Encrypted everywhere, always.
From the moment data touches our API to the moment it's purged from our systems, it's encrypted with keys that rotate automatically.
§ 05 / INFRASTRUCTURE
Built for reliability.
Cloud-native
Hosted on managed cloud
Auto-scale
Handles traffic spikes
DDoS
Protected at the edge
Monitored
Continuous health checks
Account protection
Password
Hashed, never stored in plain text
Sessions
Secure tokens, auto-expire
API keys
Bearer auth, rotate anytime
Email verify
Required on signup
§ 06 / ACCOUNT SECURITY
Your account, locked down.
Standard security features come with every plan. Passwords are hashed, sessions are secured, and API keys can be rotated anytime from your dashboard.
- Hashed password storage
- Secure session management
- API key authentication with rotation
- Email verification on signup
- Strict CORS and CSP headers
§ 07 / INCIDENT RESPONSE
If something goes wrong, we tell you.
Detect
Automated monitoring and manual checks
Contain
Isolate affected systems quickly
Notify
Communicate promptly with affected users
Post-mortem
Transparent review and lessons learned
§ 09 / RESPONSIBLE DISCLOSURE
Found a vulnerability?
We take security reports seriously. If you've discovered a potential vulnerability, please contact our security team directly so we can investigate.
Email [email protected]