How we handle
what you trust
us with.

The audit we plan to complete first. We haven’t engaged an auditor yet. Until there’s a report to share, our Security page describes the controls we use today.

Next on our roadmap, after SOC 2.

There’s no GDPR certificate to hold. It’s a law we follow: we use what you send us only to answer you, and we’ll correct or delete it when you ask.

No certificate here either. We don’t sell your information or use advertising trackers, and you can ask us what we hold, correct it or delete it.

We don’t yet sign Business Associate Agreements or take on work that needs protected health information. If your project might, tell us before we start.