Skip to content
Company

Security overview

Certificates are customer data. The product is built so files are encrypted, links expire, and vendors never need an account.

  • Transport and storage

    HTTPS everywhere. Files encrypted at rest and served through short-lived links. Portal tokens are long and random.

  • Uploads

    Rate limits apply on login, the vendor portal, and the free checker.

  • Access

    Magic-link login. Sessions last 30 days. You can sign out everywhere from Settings. Vendors act through private links, not accounts.

  • Backups

    Daily backups. Queued processing so a file is not lost if reading is delayed.