What we believe
These values guide every decision we make.
Evidence-first
Every action leaves a receipt. No black boxes.
You own your data
Your keys. Your data. We never lock you in.
Honest security
What we have vs. what we're building. No fake certs.
Fast iteration
We ship often. Your feedback shapes what comes next.
Our security posture
What we've built vs. where we're going. Honest and transparent.
Implemented
- JWT authWith configurable expiry and refresh
- Audit loggingEvery action leaves evidence
- Role-based accessFine-grained permissions
- Rate limitingProtection against abuse
On the roadmap
- SSO + SCIMEnterprise identity management
- MFA enforcementStep-up authentication
- SOC 2 Type IIPlanned Q3 2026
- ISO 27001Planned Q4 2026
Note: We don't currently hold SOC 2 or ISO 27001. These are planned for 2026.
Building remotely, serving globally
Remote-first team. We believe great software can be built from anywhere.