Security Statement

August 15, 2024

• We use encrypted connections (TLS) whenever it is possible

• We enforce 2FA (two-factor authentication) for core systems

• We use source code dependency scanning tools

• We host data provided by customers on DigitalOcean, Inc.

• We create daily data backups on DigitalOcean, Inc. and Amazon Web Services

• Daily data backups are available for a minimum of ten subsequent days

• Our services are hosted on DigitalOcean, Inc.

Security Bug Fix Policy

The following table describes when we resolve security bugs in our products:

Severity	Resolution time
Low	within 25 weeks of being reported
Medium	within 6 weeks of being reported
High	within 4 weeks of being reported
Critical	within 2 weeks of being reported