Security
Built to be safe to ship.
The detail your security team needs — encryption, access controls, vulnerability disclosure, and the framework certifications in flight.
Data in transit and at rest
TLS 1.3 in transit. AES-256 at rest. Customer-served files are signed and cached at the edge with origin verification.
Access controls
Role-based access (owner, editor, analyst). SSO via Google for sign-in. SAML SSO available on Growth.
Compliance
SOC 2 Type II in progress. GDPR-conformant data handling. DPA available on request. ISO 27001 on the roadmap for 2026.
Vulnerability disclosure
Found something? Email [email protected]. We acknowledge within 24 hours and run a coordinated disclosure process. Bounty for verified critical findings.
Assurance
Encryption everywhere. Access on a need-to basis.
Your files are signed and served from the edge with origin verification, so what AI reads is exactly what you published — and nothing else touches it.