Platform security

We use HTTPS for the hosted site, check access to requests on the server and validate API input. Sensitive configuration belongs on the server.

We are continuing to improve session protection and review dependencies. We do not claim SOC 2, ISO 27001 or HIPAA certification.

To report a security concern, contact us without publishing sensitive data.