Security
How we think about protecting money, data and access.
Our approach
Security is a design constraint for us, not a feature we intend to add later. Payment infrastructure fails in ways that are expensive and public, so we would rather build slowly against recognised standards than quickly against none.
We are building towards established industry practice for access control, encryption in transit and at rest, segregation of duties, and independent review.
What this website does
This site is informational. It has no login, no account creation and no payment fields, and it never asks you for financial details.
The only thing it stores on your device is your cookie choice.
Reporting a vulnerability
If you believe you have found a security issue affecting us, please tell us before disclosing it publicly. Call +1 (604) 449-9515 and we will route you to the right person.
We will not pursue action against anyone who reports a genuine issue in good faith and does not access, modify or retain other people's data.