Legal
Security
Effective 7 October 2026
How we protect data in transit, at rest and on delivery.
Encryption
TLS 1.2+ in transit. Encryption at rest for all stored objects. Keys are rotated and managed separately from data.
Access
Organisation-scoped access tokens, revocable at any time. Share links are signed and can be expired or revoked.
Integrity
Every upload is hashed (sha256) at the source. Every delivery ships a signed manifest with per-file checksums and is verified on arrival.
Audit
Uploads, shares, deliveries and deletions are logged with actor, time and destination. Logs are available in your account.
Isolation
Customer data is logically isolated per organisation. Public profile fields are the only data exposed without authentication.
Reporting
Write to hormonia@gmail.com for vulnerability reports. We acknowledge within two business days.