Security
How we protect accounts and data
This page lists only practices we are prepared to describe. Absolute security language and unnamed certifications are not used.
- Version
- Draft 0.1
- Status
- Requires verification
- Effective date
- To be confirmed
- Review date
- To be confirmed
- Owner
- To be confirmed
What we will describe when it exists
Access control, authentication, encryption, backups, logging, vulnerability handling, incident response, and supplier review will be documented when those measures are in place and can be evidenced.
What we will not claim
We will not say the service is completely secure, impossible to breach, zero risk, or fully compliant with every jurisdiction. We will not imply ISO, SOC, or similar certifications unless the named scope and current evidence can be provided.
How to report a concern
Use the Support Center privacy and safety route. Do not send passwords or full payment-card details. If you believe there is an active incident, say so in the first sentence.