Security Overview

Adapted from the Basecamp open-source policies / CC BY 4.0

Last updated: January 31, 2022

We protect your data

All data are backed up daily and stored in multiple locations. Files that our customers upload are stored on servers that use modern techniques to remove bottlenecks and points of failure.

Your data are sent using HTTPS

Whenever your data are in transit between you and us, everything is encrypted, and sent using HTTPS. Within our firewalled private networks, data may be transferred unencrypted.

Any files which you upload to us are stored and are encrypted at rest. Our application databases are generally not encrypted at rest — the information you add to the applications is active in our databases and subject to the same protection and monitoring as the rest of our systems. Our database backups are encrypted using GPG.

Regularly-updated infrastructure

Our software infrastructure is updated regularly with the latest security patches. Our products run on a network which is locked down with firewalls and carefully monitored. While perfect security is a moving target, we work hard to keep up with the state-of-the-art in web security.

We protect your billing information

All credit card transactions are processed using secure encryption—the same level of encryption used by leading banks. Card information is transmitted, stored, and processed securely on a PCI-Compliant network. Your credit card information never reaches our servers.

Have a concern? Need to report an incident?

Have you noticed abuse, misuse, an exploit, or experienced an incident with your account? Please visit our security response page for details on how to securely submit a report.