A security page that says what we actually do
How your data is protected, in checkable detail: envelope-encrypted site credentials, hashed API keys, scrypt-hashed passwords, read-only OAuth connectors, the complete subprocessor list — and a section on what we don’t claim. Plus a security.txt for researchers.