Trust centre
Verifiable facts.
This page summarises currently deployed controls and links to the documents governing them. It claims no certification that has not been obtained.
Account access
Revocable 24-hour sessions, httpOnly and SameSite Strict cookies, optional TOTP.
Secrets
Site secrets derived with scrypt, bcrypt passwords, TOTP secrets encrypted with AES-256-GCM.
Isolation
Keys, analytics and events are filtered by account and authorised sites.
Retention
Technical identifiers: up to 13 months. Events: 90 days. Detailed retention periods are published.
France
Application hosting
90 j
Application events
72 h
Security acknowledgement