Legal
High-level overview of how we think about security. Not a certification or SLA. Interim page — subject to professional review.
Last updated: 2026-03-22 · Interim
We take security seriously and implement reasonable administrative, technical, and organizational measures appropriate to the nature of the Service. This page describes our approach at a high level; it is not an exhaustive security whitepaper and does not guarantee that incidents will never occur.
We rely on reputable cloud and infrastructure providers for hosting, databases, and related services. Their security practices apply in addition to our own. We do not publicly list every subprocessor here; enterprise customers may request more detail where appropriate.
We follow best practices for handling credentials and secrets in our systems. You are responsible for safeguarding your account password and any API keys or tokens issued to you.
If you believe you have found a security vulnerability, please report it to us privately rather than disclosing it publicly. Use the contact channel on our Contact page and include enough detail to reproduce the issue. We do not currently operate a public bug bounty program; this may change.