Security
The short version of how we look after this website, our email and our apps.
This website
It is a set of plain pages with no scripts, no forms, no cookies and no database, served by Cloudflare over HTTPS only. Browsers are told to use HTTPS for a year, other sites cannot embed it, and a strict content policy lets pages load only their own files.
Our email runs on Google Workspace with two-step sign-in. Our domain publishes SPF, DKIM and DMARC records, so receivers can check that mail claiming to be from iprocess.ai really is.
Our apps
Each app has its own security page that says exactly where its data lives and who can see it.
- Topshots works on your own PC. Your photos and the faces it recognises stay there; nothing is sent anywhere unless you send it, and a friend's photos reach them only after they say yes.
- Splitbot: Splitbot's security page.
Found a problem?
Write to security@iprocess.ai with what you found and how to see it. We reply within five working days and keep you told while we fix it. We would rather hear about a weakness than not, and we will not take action against anyone who reports one in good faith and gives us a fair chance to fix it before telling others.
Machine-readable contact details: security.txt.