Security

A short, honest summary of how we protect the service and your account.

In transit and at rest

All traffic to Datum is served over HTTPS with a valid certificate. Passwords are stored only as salted one-way hashes, never in plain text.

Access and hosting

The application runs on a hardened server with a restrictive firewall, and the database is a managed service with automated backups. Administrative access is limited and key-based.

Your part

Use a strong, unique password and keep it private. We will never ask for your password by email.

Responsible disclosure

If you find a security issue, please tell us before disclosing it publicly. Email hello@datumai.ca with the details and we will work with you on a fix.