Security You Can Trust

All API communications are encrypted using TLS 1.2+ (HTTPS). We enforce secure connections and reject unencrypted requests.

• TLS 1.2 and 1.3 supported
• HSTS enabled
• Strong cipher suites only

Data stored on our platform is encrypted using AES-256 encryption. API keys are hashed and never stored in plain text.

• AES-256-GCM encryption
• Automatic key rotation
• Secure key management

Secure API key authentication with support for key rotation, scoped permissions, and usage monitoring.

• Unique API keys per account
• Key regeneration on demand
• Usage analytics and alerts

Built-in rate limiting protects against abuse. Google Cloud's infrastructure provides DDoS mitigation at the edge.

• Per-key rate limits
• Burst allowances
• Automatic threat blocking

Comprehensive logging of API access and administrative actions for security monitoring and compliance.

• Request logging
• Access audit trails
• Anomaly detection

Role-based access controls for team accounts. Principle of least privilege applied across our infrastructure.

• Team member roles
• Scoped API keys
• SSO support (Enterprise)

Google Cloud Platform

Our entire infrastructure runs on Google Cloud, benefiting from their world-class security and compliance certifications.

Isolated Compute

APIs run in isolated containers with no shared resources between customers. Each request is processed in a secure sandbox.

Network Security

Virtual private cloud with strict firewall rules. Internal services are not exposed to the public internet.

Redundancy

Multi-region deployment with automatic failover. Your API calls are routed to the nearest healthy endpoint.

SOC 2 Type II

We are actively working toward SOC 2 Type II certification.

GDPR

We comply with GDPR requirements for data protection and privacy.

CCPA

We honor California Consumer Privacy Act data rights.

Google Cloud

Built on Google Cloud's SOC 1/2/3, ISO 27001 certified infrastructure.

What data do you store?

We store your account information, API keys (hashed), and usage metrics. We do not store the content of your API requests or responses beyond what's needed for real-time processing.

How long is data retained?

Usage logs are retained for 90 days for analytics and debugging purposes. You can request deletion of your account data at any time by contacting us.

Do you sell or share data?

No. We never sell your data or share it with third parties for marketing purposes. Data is only used to provide and improve our services.

Where is data processed?

All data is processed on Google Cloud infrastructure. Primary processing occurs in US regions, with edge caching globally for performance.