How We Keep Your Data Safe

Encryption at Rest

Your sensitive data is encrypted before it's stored in the database using AES-256-CBC encryption. Even if the database were compromised, your confidential information remains unreadable. This includes:

• Meeting notes and discussion topics
• Action item descriptions
• Objective definitions

Strong Password Requirements

We enforce robust password policies to protect your account:

• Minimum 12 characters required
• Must include uppercase and lowercase letters
• Must include numbers and symbols
• Checked against known data breaches

Two-Factor Authentication (2FA)

Add an extra layer of security to your account with time-based one-time passwords (TOTP). Works with popular authenticator apps like Google Authenticator, Authy, or 1Password.

Recovery codes are provided when you enable 2FA, ensuring you can always access your account.

Session Protection

Your sessions are protected with multiple security measures:

• Automatic logout after 60 minutes of inactivity
• Sessions expire when you close your browser
• Encrypted session data
• Strict same-site cookie policy

Brute Force Protection

We protect against automated attacks with intelligent rate limiting:

• Login attempts limited to 5 per minute
• Password reset requests limited to 3 per minute
• Automatic blocking of suspicious activity

Secure Connection

All data transmitted between your browser and our servers is encrypted using HTTPS/TLS. This ensures that your information cannot be intercepted or tampered with in transit.

Administrative Transparency

All administrative actions are logged and auditable. If an administrator accesses your account or data, you'll be notified. This ensures complete transparency and accountability.