Legal
Security & Responsible Disclosure
How the platform is secured and how to report a vulnerability.
Version 0.1-draft · Effective Pending · Audience: all
This document has not yet been reviewed or approved by legal counsel. It is published so the platform structure can be reviewed and should not be relied upon as a final agreement.
Security by design
The platform is built with encrypted transport, secure authentication, least-privilege role-based access, row-level data authorization, secret management outside the browser, audit logging of critical events, and backups.
No system can be described as unbreakable, and we do not make that claim. We describe only controls that are actually in place.
Reporting a vulnerability
If you believe you have found a security issue, please contact support with the details and give us a reasonable opportunity to investigate and remediate before public disclosure.