Encryption
Provider credentials and API tokens are stored encrypted in our database, which keeps them unreadable without the application-specific key. Passwords are stored as a one-way hash, so nobody can read them back, including us. Access to the database is restricted to one authorized person.
Backups
We currently perform backups twice daily.
Secure connections
We use LetsEncrypt and Cloudflare SSL certificates, our SSL certificate has an A+ rating from SSL Labs, and we exclusively permit HTTPS requests to our domain, eliminating the risk of downgrade attacks to HTTP.