Security and privacy

What we do

• Passwords are stored as salted hashes, never as text
• Optional two-step sign-in
• Repeated wrong passwords lock the account for 15 minutes
• Every organisation's files are kept apart
• An activity log records sign-ins and file actions
• Backups can be made with one command
• A CA or reseller cannot read a client's files
• No advertising and no tracking cookies; one cookie keeps you signed in
• Servers in India

What we have not done yet

• An independent security audit or penetration test
• A published uptime history
• Formal certification such as ISO 27001

We will say here when these are done.

Read the privacy policy, the security policy and the grievance procedure. To report a weakness, write to contact@indoriamunim.in.