Enterprise-grade security
We take security seriously. Your data is protected by bank-level encryption, industry best practices and a security-first culture at every layer of the platform.
Encryption in transit
All data is transmitted using industry-standard protocols, protecting your information between your browser and our servers. HTTPS is available on request.
Encryption at rest
Your data is stored securely in our database with strict access controls, so only authorised systems can read it.
AI data handling
To deliver intelligence, GradientSlop securely shares your data with our AI partners for processing. Our partners maintain their own industry-leading privacy standards, which we fully trust. We never train models ourselves.
Authentication
Secure sign-in with role-based access control ensures every user sees only what they're permitted to. Multi-factor authentication is coming soon.
Multi-factor authentication
MFA is enabled for every account, adding a second layer of protection beyond your password. Recovery codes are kept securely on the same machine as the application, in a text file, so they're always available when you need them.
Secure by design
Security was built in from the very first prompt. The platform was explicitly instructed to be secure and to make no mistakes, and it confirmed that it would. We consider this a strong control.
Penetration testing
The platform is regularly tested with an automated security scanner. The most recent scan ran against localhost with the server switched off and reported zero findings.
Backups & recovery
Automated backups and a comprehensive disaster-recovery plan are coming soon, giving you peace of mind that your data is always safe.
Compliance
We're fully compliant with all applicable regulations, standards and frameworks, as far as we're aware. Nobody has asked us to prove this yet.
Responsible disclosure
We welcome reports from the security community. If you believe you've found a vulnerability, please contact security@gradientslop.com and we'll respond as quickly as we can. See also /.well-known/security.txt.