Viwango vya Usimbaji
Taarifa zako zinabaki salama katika kila hatua — TLS 1.2+ wakati wa uhamishaji na AES-256-GCM ikiwa imehifadhiwa, kwa kutumia hatua za ulinzi za kiwango cha sekta unazoweza kuziamini.
Ulinzi wa Data Wakati wa Uhamishaji
Data yote inayotumwa kati ya kivinjari chako na seva zetu inabaki salama kwa kutumia TLS.
- TLS 1.2 na 1.3 pekee
- Cipher suites zenye nguvu (AES-GCM)
- HSTS imewezeshwa na preload
- Perfect Forward Secrecy
Ulinzi Ikiwa Imehifadhiwa
Data nyeti iliyohifadhiwa kwenye hifadhidata yetu inasimbwa kwa kutumia AES-256-GCM.
- Usimbaji wa AES-256-GCM
- Funguo tofauti kwa kila mtumiaji
- Msaada wa mzunguko wa funguo
- Hifadhi salama ya funguo
Nini Kinasimbwa?
Kinasimbwa Daima
- Mawasiliano yote ya API
- Funguo za kriptografia
- Taarifa za kuingia za mtumiaji
- Tokeni za kikao
Kinasimbwa Wakati wa Kuhifadhi
- Nyenzo za funguo za mtumiaji
- API tokens
- Siri za 2FA
- Backup codes
Haihifadhiwi Kamwe
- Maandishi yako asilia
- Yaliyoshughulikiwa
- Maudhui ya hati
- PII iliyogunduliwa
How Your Data Is Protected
- 1
Encrypted connection
Every request travels over TLS 1.3 with Perfect Forward Secrecy. No plaintext ever crosses the wire.
- 2
In-memory processing only
Presidio AI analyzes and anonymizes text entirely in RAM. Your original content is never written to disk or stored in a database.
- 3
Keys derived with Argon2id
User encryption keys are derived from your password using Argon2id — the winner of the Password Hashing Competition — before being wrapped with AES-256-GCM.
- 4
Zero-Knowledge key storage
Your wrapped key is stored encrypted. The server never sees your plaintext key or password. Only you can unwrap it.
- 5
Asymmetric option with RSA-4096
For multi-party workflows, RSA-4096-OAEP encapsulates a session key so only the private key holder can deanonymize output.
Encryption Standards Reference
| Standard | Use Case | Key / Strength |
|---|---|---|
| TLS 1.3 | Data in transit | ECDHE + AES-GCM |
| AES-256-GCM | Data at rest | 256-bit |
| XChaCha20-Poly1305 | Zero-knowledge key storage | 256-bit |
| Argon2id | Password key derivation | PHC winner |
| RSA-4096-OAEP-SHA256 | Asymmetric key encapsulation | 4096-bit |