Encryption and infrastructure

Data Encryption

In transit

All communications between your browser and our servers are encrypted with TLS 1.3, the most recent and secure encryption protocol.

• All HTTP connections are automatically redirected to HTTPS
• SSL/TLS certificates automatically renewed
• HSTS enabled (HTTP Strict Transport Security)

At rest

All stored data is encrypted with AES-256:

• Databases
• Files and documents
• Backups
• Logs

Encryption keys

Encryption keys are managed via a dedicated Key Management Service (KMS) with automatic rotation.

Infrastructure

Availability

• 99.9% SLA uptime for enterprise accounts
• Redundant architecture across multiple availability zones
• Automatic failover
• 24/7 monitoring with real-time alerts

Backups

• Automatic hourly backups
• 30-day retention
• Monthly restore testing
• Geo-replicated backups

Network security

• Web Application Firewall (WAF)
• DDoS protection
• Network segmentation
• Intrusion detection (IDS/IPS)

Security Testing

• Pentests: penetration testing performed at least twice a year by independent firms
• Bug bounty: reward program for responsibly disclosed vulnerabilities
• Vulnerability scans: continuous automated scanning of our infrastructure