Security You Can Trust
We take security seriously. Your data is protected with AES-256 token encryption, TLS in transit, and GDPR-friendly data practices.
Controls We Have in Place
The security practices built into the platform
Security Features
Protection at every layer, from encryption to access control
Data Encryption
AES-256 for secrets at rest, TLS in transit
- AES-256-GCM encryption for bot tokens and secrets
- TLS for all data in transit
- Encrypted credential storage with key separation
- Encryption keys kept out of application logs
Access Control
Role-based access with 2FA support
- Two-factor authentication (2FA)
- Refresh-token rotation with theft detection
- Role-based access control (RBAC)
- Rate limiting and session management
Infrastructure Security
Built on reputable managed cloud providers
- Hosted with established cloud providers
- Managed, monitored infrastructure
- Provider-level DDoS protection
- Regular dependency and security reviews
Monitoring & Detection
Continuous monitoring and logging
- Continuous platform monitoring
- Spam and abuse detection built into modules
- Automated dependency vulnerability scanning
- Audit logging of key actions
Defense in Depth
Five layers stand between an attacker and your data
How We Protect Your Data
Practical security built into the platform
AES-256 Token Encryption
Bot tokens and other secrets are encrypted at rest with AES-256
EnabledEncryption in Transit
All traffic is protected with TLS
EnabledGDPR-Friendly Practices
Data export and deletion on request; we never sell your data
In practiceNo Message Snooping
The bot only processes commands and moderation checks; we do not read your conversations
By designSecurity Practices
How we keep your data safe
Secure Development
Incident Response
Vendor Security
Employee Security
Responsible Disclosure
Found a vulnerability? Report it to us and we will work with you to fix it..
Questions About Security?
Our security team is here to answer your questions and provide additional documentation.