Security Statement

February 2, 2026

• We use encrypted connections (TLS) whenever it is possible

• We enforce 2FA (two-factor authentication) for core systems

• We use source code dependency scanning tools

• We host data provided by customers on DigitalOcean, Inc.

• We create daily data backups on DigitalOcean, Inc. and Amazon Web Services

• Daily data backups are available for a minimum of ten subsequent days

• Our services are hosted on DigitalOcean, Inc.

Security Bug Fix Policy

The following table describes when we resolve security bugs in our products:

Severity	Resolution time
Low	within 175 days of being reported
Medium	within 84 days of being reported
High	within 42 days of being reported
Critical	within 10 days of being reported