Security, trust and reporting
How we protect the site and the data you share with us.
Our approach
Security is part of how we operate the site and the services behind it. We apply measures appropriate to the risk and review them as the product changes.
Measures we use
- HTTPS with HSTS on all public pages, and a strict transport configuration.
- Access controls and least-privilege accounts for systems that hold customer data.
- Security headers and a content security policy on the public site.
- Regular updates of the runtime, dependencies and server configuration.
- Backups with a defined retention and restore process.
- Incident response and customer notification procedures described in our DPA.
What we do not claim
No website or service is completely secure. This page describes our current practices; it is not a warranty or a substitute for the security terms in a signed agreement.
Reporting a vulnerability
If you believe you have found a security issue, email hello@synapser.ai with the subject “Security report”. Include the affected URL, a short description and steps to reproduce. Please do not access data that is not yours, disrupt the service or disclose the issue publicly before we have had a reasonable chance to respond.
We review good-faith reports and will acknowledge them within a reasonable time. We do not offer a paid bug bounty at this stage.