How we protect your data
Infrastructure, access, and security practices designed to protect accounts and communications.
Secure infrastructure
Hosted on Amazon Web Services, with infrastructure designed around established security standards.
Credit card safety
Payments are handled by Stripe. Card data is processed and stored by Stripe, not on our servers.
Vulnerability scanning
We routinely scan production systems and applications for vulnerabilities and known threats.
Security training
Employees receive training on phishing, passwords, attachments, and other security risks.
Access control
Staff access requires multi-factor authentication, with customer-data access limited by role.
Encryption
Data is protected in transit and at rest using modern encryption standards.
Certifications & standards
See what’s certified, underway, and planned.
GDPR
In progress · Sept 2026
Data protection and subject rights for people in the EU and UK.
CCPA
In progress · Sept 2026
Privacy rights and consumer protection for California residents.
SOC 2
In progress · Sept 2026
Independent controls for security, availability, and confidentiality.
