Security

Security engineered in, not bolted on.

How we protect accounts, data and payments.

Our safeguards

Access control

Role-based access with least privilege.

Encryption

Data protected in transit and at rest.

Audit trails

Sensitive actions are logged and reviewable.

Payment security

PCI-compliant partners; signed, verified webhooks.

Monitoring

Rate limiting, validation and risk detection.

Secret hygiene

Secrets managed outside source, rotated on exposure.

Responsible disclosure is welcome and appreciated.