Security Overview

Last updated: June 26, 2020

Built on Google Cloud

Our application is built fully on Google Cloud. We benefit from their data center and system development practices. We leverage Google Cloud's best practices to ensure that our systems are secure from the outside-world.

We protect your data.

All data are written to multiple disks instantly, backed up, and stored in multiple locations. Files that our customers upload are stored on servers that use modern techniques to remove bottlenecks and points of failure.

Your data are sent using HTTPS.

Whenever your data are in transit between you and us, everything is encrypted, and sent using HTTPS. Within our firewalled private networks, data may be transferred unencrypted.

Any files which you upload to us are stored and are encrypted at rest. Our application databases are generally not encrypted at rest — the information you add to the applications is active in our databases and subject to the same protection and monitoring as the rest of our systems.

Regularly-updated infrastructure.

Our software infrastructure is updated regularly with the latest security patches. Our products run on Google Cloud's networking infrastructure, which enables firewall and application security.

We protect your billing information.

We use Stripe to process your billing information. Card information is transmitted, stored, and processed securely on Stripe's PCI-Compliant network.

Have a concern? Need to report an incident?

Have you noticed abuse, misuse, an exploit, or experienced an incident with your account? Please contact us to submit a report.

Adapted from the Basecamp open-source policies / CC BY 4.0