Security

Secure authentication

Passwords are stored in protected, hashed form and never in plain text. We support strong password policies and, where available, two-factor authentication.

Encryption in transit

Traffic between your browser and our services is encrypted in transit. Sensitive values, where used, are protected at rest.

Access controls

Access to user data is limited to staff and systems that need it to operate, with least-privilege principles and access reviews.

Monitoring

We monitor for suspicious activity — unusual logins, abuse patterns and platform misuse — and act on it, without disclosing details that could help attackers.

Vulnerability management

We keep our software updated, review dependencies, and run fixes for known vulnerabilities. We do not publish the specifics of our defensive controls.

Incident response

If something happens, we respond to contain, investigate and fix, and we notify affected users and applicable authorities where required by law.

Report a security issue

Found a vulnerability? Report it responsibly through the Report a security issue page. Do not publish exploit details publicly — give us a chance to fix it first.