Security Architecture

Last updated: May 30, 2026

1. Data Center Security

Our servers are hosted in secure, industry-leading Amazon Web Services (AWS) and MongoDB Atlas data centers. These facilities implement strict biometric access controls, 24/7 security monitoring, and are compliant with SOC 2 Type II and ISO 27001 standards.

2. API Key Management

If you configure personal OpenAI or Gemini API keys inside your settings to power high-performance generation, these credentials are encrypted using industry-standard AES-256 protocols and stored safely inside your local storage scope. They are never transmitted or shared with anyone else.

3. Secure Session Scopes

We employ secure JSON Web Token (JWT) standards to manage user sessions. Authentication tokens expire automatically after 7 days, and passwords are comprehensively hashed using bcrypt protocols inside our databases, ensuring robust protection against intrusion.