Security
How we protect your data
Encrypted connections
Every page and API call is served over HTTPS, and browsers are told never to fall back to plain HTTP.
Secrets encrypted at rest
Credentials for services you connect, and sign-in secrets such as MFA keys, are stored as AES-256-GCM ciphertext.
Organizations kept apart
Row-level security in the database keeps each organization's projects and records out of every other organization's reach.
Access by role
Individuals, pros, enterprise admins and developers each see only their own part of PeerX and what their role allows.
An audit trail
Administrative actions are recorded with who took them and when.
Privacy requests
When someone asks, we can export a person's data or delete it.
Documents
Read them here, or ask us for the ones that aren't published.
- Data processing agreement
How we process personal data on your behalf.
- Subprocessors
The companies that process data for PeerX, and what for.
- Privacy policy
What we collect, why, and how long we keep it.
- Service level agreement
Service levels, agreed in Enterprise contracts only.
Security overview
Our architecture and practices in more detail, sent on request. Ask for it
Found a vulnerability?
Email [email protected] with what you found and the steps to reproduce it. Please don't access or change anyone else's data while you look.