Security
Enterprise-grade by default
Your customer data is sensitive. We treat it that way with encryption, strict access controls, and continuous monitoring.
Data encryption
All data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Secrets and credentials are stored in isolated, access-controlled vaults.
Access controls
We enforce least-privilege access, SSO for enterprise customers, and full audit logging across the platform. Production access is limited and reviewed regularly.
Compliance
We're building toward SOC 2 Type II and GDPR compliance. Data processing agreements are available for enterprise plans on request.
Reporting a vulnerability
Found something? Email security@getminimal.co and our team will respond promptly. We appreciate responsible disclosure.