Security
What protects your decisions, in plain English.
EncryptionTLS everywhere, HSTS on. Decision content is encrypted with AES-256-GCM using a key per account, itself wrapped by a master key held in a key vault.
AccessNo passwords to leak: sign-in is by one-time email link or Google. Staff access to customer content requires your time-limited grant and is audited.
Audit trailSign-ins, exports, shared-link changes, consent changes, billing changes and support access are recorded in an append-only log you can view in Settings.
ApplicationStrict content security policy, CSRF protection on every change, rate limits on sign-in and review links, and signed, expiring links for reviews and team scoring.
PaymentsCard details go straight to Stripe and never touch our servers.
RetentionSign-in links expire after 15 minutes. Deleted decisions are purged after the undo window. Audit events are kept for one year.
ReportingFound something? Email [email protected]. We reply within two working days.