Security and your data

Where your data lives, how it is protected, and who can reach it.

security.posture

Where data lives (EU/UK region), encryption in transit and at rest, backups and retention, who can access data, account security. ⚠ ONLY claims we can stand behind — no 'bank-grade', no certifications we do not hold.

security.subprocessors

The public sub-processor list (Paddle, the email provider, the host, and Supabase once adopted) + DPA availability + responsible-disclosure contact.