Security
Enterprise-Grade Security
Your data and connections are safe with us. Learn about our encryption standards and privacy-first approach.
Encrypted sessions
Authentication tokens are signed, short-lived, and protected by HTTP-only sessions in the web app.
Private by default
Profile data is stored in isolated organization records, and hidden or unverified contacts are excluded from public cards.
Protected operations
Sensitive account, billing, card, and team operations require an authenticated bearer token and are rate limited where appropriate.
Responsible disclosure
Report a suspected vulnerability through the contact form. Do not include passwords, access tokens, or private card data in a report.