Security
Last updated May 9, 2026
Placeholder security overview. Will be expanded as we mature certifications. Pre-launch, all infrastructure is hosted on Northflank with automated TLS and a managed Postgres.
Encryption
All traffic is over TLS — the .app TLD is HSTS-preloaded so HTTPS is enforced at the browser level. Postgres connections use TLS in transit. Backups are encrypted at rest.
Authentication
Sign-in is via Google OAuth — we never see or store passwords. Sessions use signed JWTs in HttpOnly cookies, with a 30-day expiry.
Access control
Production database access is limited to two engineers. All access is logged. Workspace data is scoped at the application layer — admins of a workspace can only see emails sent by members of that workspace.
Reporting issues
Security issues: security@readsignal.app. We respond within 48 hours.