Security

Security is foundational to how we build. This page summarizes our practices; it is sample content for a marketing template.

Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256.

Payments & PCI

Card data is handled entirely by Stripe, a PCI-DSS Level 1 certified provider. We never see or store full card numbers — only tokenized payment-method references and the last four digits for display.

Access control

SSO/SAML, role-based access control, and audit logging are available on the Scale plan. Internal access follows least-privilege and is reviewed regularly.

Compliance

We align our controls to SOC 2 Type II and support GDPR and CCPA data rights.