Security
Here is what we do today to protect your data, and just as clearly, what we do not claim.
The website is served over HTTPS (TLS 1.2 and 1.3) with HSTS. Database passwords you give us are encrypted before they are stored.
Every record belongs to one account and every query is filtered by it. This is covered by automated tests: one customer cannot open, change or delete another customer's data.
We only read what the analysis needs. Connect with a read-only database user if you can; our sync only runs read queries. Connections to private or internal addresses are blocked.
We connect out to your database (or you upload a file) and copy only the fields needed to score risk. We use SSL for the database connection whenever your database supports it.
We would rather be precise than impressive.
Read the Privacy Policy for what we store and for how long.