Security

This is placeholder content. It describes the shape of the final document so the page can be reviewed, but it has not been drafted or checked by a lawyer and must not be relied on.

Infrastructure

Hosted in South African regions, with encryption in transit and at rest, network isolation and least-privilege access.

Access control

Role-based permissions, optional single sign-on, and audit logging on Enterprise plans.

Development practice

Peer-reviewed changes, dependency scanning, and secrets held outside source control.

Backups and recovery

Automated backups with tested restores and documented recovery objectives.

Incident response

A defined process for detection, containment and customer notification.

Reporting a vulnerability

Please report anything you find via our contact page. We will acknowledge quickly and keep you updated.