Loading…
Security controls, live status, subprocessors, and our data-processing terms - in one place. Need something specific? Ask and a human responds same-day.
Encryption
AES-256-GCM at rest, TLS in transit. Secrets sealed with per-purpose keys.
Identity
SSO / SAML, SCIM, enforced MFA, and hardware passkeys.
Infrastructure
Multi-AZ on AWS, RPO 5 min, RTO 1 hr, 35-day backup retention.
Link protections
Expiry, view caps, IP and country allow-lists, watermarks, and instant revoke.
Access controls
Least-privilege engineering access, reviewed quarterly, audited via internal AuthZ.
Audit logging
Every action written immutably; exportable via API or streamed to SIEM.
Real humans answer. Same-day on most requests.