Security

Security and compliance

Passwords

Passwords are stored as salted hashes, never in plain text.

Sessions

Sign-in uses signed tokens that expire after seven days.

Google sign-in checks

Google tokens are verified for our app and a confirmed email before access is granted.

Compliance programs are not available yet. Contact us for security questions.