Security

Security is core to how we build Assistive. This page summarizes the practices we use to protect your data. If you have a specific question or need documentation for a review, contact us at[email protected].

Data encryption

Data is encrypted in transit using TLS, and data at rest is encrypted using industry-standard algorithms. Secrets and credentials are stored using dedicated secret management rather than in application code.

Infrastructure and access

The service runs on reputable cloud infrastructure with network isolation and least-privilege access. Internal access to production systems is limited to the people who need it, granted by role, and reviewed regularly.

Authentication

Accounts are protected by hashed credentials, and we support secure authentication options. We recommend strong, unique passwords and enabling any additional protections available on your account.

Monitoring and backups

We log and monitor production systems for anomalies, and we maintain regular backups with the goal of recovering quickly from disruption. We test our ability to restore data periodically.

Responsible disclosure

We welcome reports from security researchers. If you believe you have found a vulnerability, please email[email protected] with the details and steps to reproduce. Please give us a reasonable chance to investigate and fix the issue before any public disclosure, and avoid accessing or modifying data that is not yours.

Compliance

We align our practices with widely recognized security standards. For the current list of certifications, audits, or data processing terms, contact[email protected].

Contact us

For anything security related, reach us at[email protected].