Security
Our security approach
What's in place today, and what we're building next. We don't claim certifications we don't hold.
Sign-in
- No passwords: each sign-in uses a six-digit code sent to your email.
- Optional authenticator-app protection for extra security.
- Rate limits on code requests and verification attempts.
Your files
- Files are private by default and reached only through your account or links you create.
- Share links will be short-lived and revocable.
Staff access
- Staff tools are separate from customer accounts and require authenticator-app verification.
- Staff actions are recorded in an audit log.
Reporting a vulnerability
A security contact address will be published here soon.