Security

Designed around least privilege

Security controls are part of the product architecture rather than a marketing afterthought.

Encrypted storage

Documented, monitored and covered by automated release checks.

Revocable sessions

Documented, monitored and covered by automated release checks.

Granular permissions

Documented, monitored and covered by automated release checks.

Immutable audit history

Documented, monitored and covered by automated release checks.

Regional infrastructure

Documented, monitored and covered by automated release checks.

Tested recovery

Documented, monitored and covered by automated release checks.

Responsible disclosure and assurance

Never place a vulnerability or child information in a public issue. Use the private security route described on the support page. This page describes engineering controls, not a certification. Production release still requires a current penetration test, privacy review, successful restoration rehearsal and green CI security evidence.