Everything a security reviewer, legal team, or admin needs to answer that — in one place, written plainly, with honest status on every claim.
Encryption, isolation, retention, and our honest compliance status.
Read the Security page →What we collect, the controller/processor split, and your rights.
Read the Privacy Policy →Every third party that touches your data, and why.
View subprocessors →Data Processing Addendum for GDPR/UK transfers.
Request the DPA →Report a security issue; we respond within one business day.
Report a vulnerability →Live platform status and historical availability.
Open status page →