Safe by Default
Security is not a feature you add before launch. It is a set of decisions made every day, and a posture you can prove to a customer, an auditor or a regulator.
Encrypted End to End
TLS everywhere, encrypted at rest, with keys rotated on a schedule you can inspect.
Least Privilege
Every account gets exactly the access it needs and loses it the day it does not.
Audited Continuously
Dependency scanning, penetration tests and a public disclosure policy.
Common Questions
Where is our data stored?
In the region you choose, with no silent replication elsewhere. We will name the provider, the region and the retention period in writing before anything goes live.
Do you support single sign-on?
Yes: SAML and OIDC on every plan, not as a premium upsell. We think charging extra for the secure option is backwards.
What happens if we leave?
You export everything, in open formats, whenever you like. There is no exit fee and no notice period on the export itself.
How do you handle incidents?
A named responder within the hour, a written timeline within a day, and a public post-mortem for anything that touched customer data.
