Practice
- 01
Security
HTTPS everywhere, 2FA, session and device management, role-based access and rate limiting.
- 02
Privacy
Privacy controls, data export and account deletion available to every account.
- 03
Infrastructure
Encrypted secrets, secure key handling and separation of server-side credentials.
- 04
Data protection
Encryption in transit and at rest, with secure password hashing.
- 05
AI data policy
What our AI features do and do not do with the material you give them.
- 06
Availability
Published status and incident history rather than a private dashboard.
- 07
Backup
Regular backups with tested restores.
- 08
Audit logs
Login, role, billing, licence, API-key and admin events recorded with user, time, IP and result.
- 09
Incident response
A defined path for detection, containment, communication and post-incident review.
Contact the security team directly. We would rather hear it from you than from an incident.