At Cuttable, protecting your data is a top priority. We follow industry-standard practices to ensure your information is secure and handled responsibly.
🔒 Encryption and Resource Access
All data is encrypted in transit (HTTPS/TLS) and at rest.
Media assets are stored securely using trusted cloud providers on Amazon S3.
Access to assets is restricted and verified through signed, expiring URLs.
No passwords are stored — Cuttable uses secure, password-free login via magic links.
Automatic timeouts protect against unattended sessions.
💻 Infrastructure & Source Code
Hosted on reliable cloud infrastructure with redundancy and failover systems.
Regular code reviews and automated testing for all production code.
Dependencies are vetted for security and performance.
Ongoing third-party assessments to ensure industry-standard practices are met.
🔑 Key & Access Management
Keys are never stored in plaintext or in version control.
Individual, role-based keys and permissions are issued to team members.
Access is regularly audited and updated to the principle of least privilege.
🖥️ Secure Workstations
All company laptops are encrypted and protected with endpoint security software.
Employee access to sensitive data is logged, monitored, and limited by role.
Developers work with anonymised or synthetic data in non-production environments.
👩💻 Employee Awareness
All employees complete training on security best practices.
Strict internal policies govern access to production systems.
Access to sensitive data is always monitored and reviewed.