Your data, protected
Honestly
What runs in production today, and the gaps we are still closing.
What runs today, and the gaps we are still closing.
What we hold
And what we don’t
Each standard, with where it stands today.
TLS 1.2+ Live
On every external endpoint.
HSTSIn transitEncryption at rest Live
AWS-managed, for files and backups.
AWS S3BackupsPCI DSS Live
Cards are handled by Stripe and Razorpay.
SAQ-ASOC 2 Type II Building
Readiness under way. AWS, underneath, is attested.
ISO 27001 No
Not pursued today.
HIPAA No
We sign no BAAs. Keep health records out.
Defence in depth
Layer by layer
What runs in production right now.
Every query scoped to your workspace
A request for another workspace’s data is bounced. Fail-closed.
An honest limit
Notes are not scanned before a connected AI reads them.
In place today6
Infrastructure Live
AWS, in the Hyderabad and Mumbai regions.
DDoS protectionPrivate networkDaily backupsService levels →Sign-in and access Live
Roles per workspace, fail-closed.
Google and MicrosoftSAML and OIDC SSORate-limited loginsYour data Live
Every query scoped to your workspace.
30-day restoreExport on requestDeleted within 90 daysData deletion →AI and your data Live
Off until an admin turns it on.
Personal fields maskedNever used for trainingNo raw audio keptAI transparency →AI connectors Live
Keys shown once, revoked after 90 days.
OAuth 2.1 and PKCE256-bit keysEvery call loggedConnector terms →Incidents Live
Notice within 72 hours of a confirmed breach.
Root-cause reviewStatus pageStatus page →What we’re still building
Over-promising on security is worse than under-promising.
Two-factor sign-in Roadmap
Use a strong, unique password until it ships.
Email verification Roadmap
Not enforced at signup today.
Token encryption Building
Integration tokens move to app-layer encryption.
Off-site backups Building
Encrypted, with key rotation. Today: AWS disk encryption.
Anomaly detection Roadmap
Today: logs, rate limits and audit trails.
Code scanning in CI Roadmap
Today: dependency review and framework protections.
Report an issue
Or ask for a review
- Security questionnaire
- Architecture diagrams
- Pen test reports
- Sub-processor attestations
One record
Start there
Free plan, no card. Five tools replaced in an afternoon; your data stays yours.
pick a slot. we call you, on your clock.we call you,
on your clock.
No card. We only use your details to set you up or call you back.
A 20-minute call with a real person, on your clock.