Trust isn't a vibe; it's infrastructure. This page lays out how we secure the platform, how we use AI, and the third parties involved in delivering the service.
TLS 1.3 in transit. AES-256 at rest. Encrypted database backups stored in a separate region.
Fortify-backed sessions, optional 2FA with TOTP, LinkedIn OAuth, and signed magic links for sensitive flows.
Tier-1 European cloud, hardened images, infrastructure-as-code, least-privilege IAM.
Coordinated disclosure process. Triage within one business day. Public acknowledgement for accepted reports.
In the era of synthetic intelligence, data sovereignty is non-negotiable. We built the Trust Protocol for enterprise PR agencies and top-tier newsrooms — which means your proprietary pitches and your clients' unpublished quotes are handled with strict isolation.
We explicitly opt out of data-sharing agreements with foundational LLMs. Your pitches, your clients' quotes, and your journalistic requests are never used to train base models.
Audits run in isolated, transient instances inside secure European server clusters. When the Information Gain audit completes, the temporary processing memory is wiped.
We never store raw intellectual property on a public ledger. We generate a unique cryptographic hash of your Citable Packet and anchor only the hash — immutable proof-of-origin, zero exposure of your text.
We notify workspace owners 30 days before adding a new sub-processor.
We accept vulnerability reports at [email protected]. We acknowledge within one business day, triage with you, and publicly credit accepted reports unless you ask otherwise.