Your workspace is yours alone
Every project, prompt, scan and answer belongs to one workspace, and the database itself refuses to return it to anyone who is not a member of that workspace. This is enforced by row-level security in the database, not only by the application, and it is checked by automated tests that try to read and change another workspace's data as a signed-in user.
Plan limits and the monthly allowance are enforced on the server, where a request from the browser cannot change them.
Signing in
- Passwords are handled by our authentication service and stored only as hashes.
- Two-factor authentication with an authenticator app is available for every account. Once you turn it on, your project data cannot be read until you have completed the second step.
In transit and at rest
- The site is served only over HTTPS, and browsers are told to use HTTPS for all future visits (HSTS).
- Pages cannot be embedded in other sites, which protects against clickjacking.
- Your data is stored in the EU (Frankfurt), and the application runs in the Netherlands (Amsterdam).
- The database is backed up daily.
AI providers
Your browser never talks to an AI provider. Scans run on our servers, and the keys used to reach the providers never leave them. A provider receives the text of the prompts you approved and nothing about your account.
Abuse protection
Traffic is rate-limited per address at the edge, and the server only accepts web traffic through a firewall.
Reporting a vulnerability
If you believe you have found a security issue, email hello@citerva.com with the details. Please do not access or change data that is not yours while investigating.