Security is not an afterthought.
Here is exactly how your data is protected, end to end.
Encryption
Backups are encrypted directly on your server, before any data leaves the machine.
We never have access to your unencrypted data.
Encryption relies on age, a modern scheme combining X25519 key exchange and ChaCha20-Poly1305.
Agent authentication
Each agent enrolls with a unique signed keypair — no shared secret between agents.
Every request from an agent is verified against its public key.
Access control
Roles (owner, admin, member) restrict who can manage servers, billing and integrations.
Team invitations expire and can be revoked at any time.
Audit log
Every sensitive action — invite, role change, key creation, restore — is recorded.
The audit log is available from your dashboard for full traceability.
API keys
The public API is read-only and secured by scoped API keys.
Keys can be revoked instantly from the dashboard.