Security

Write to us with enough detail to reproduce the issue. We will confirm we have received it, tell you what we find, and let you know when it is fixed. We will not take legal action against anyone who reports a problem in good faith and does not access or alter data belonging to other people.

Traffic is served over HTTPS only. Client data is separated by organisation at the database layer rather than filtered in the interface. Files shared with clients are served through short-lived signed links, never public URLs, and every download is recorded.