Security
Last updated
[OWNER REVIEW NEEDED before publishing: confirm that every statement on this page is accurate for the live production deployment (HTTPS everywhere, managed database, object storage, access controls) and that nothing overstates the current position.]
Effective date: 2026-09-20. Last updated: 2026-09-20.
Account security
Passwords are never stored in plain text. Access to your account is protected by an authenticated, token-based session rather than a shared or guessable identifier.
Data in transit
Trovid is served over HTTPS.
Data storage
Your account data is stored in a managed database, and uploaded/generated media is stored using cloud object storage — never on a developer's personal machine.
Administrative access
Administrative tools and content-management functionality are restricted to authorized administrator accounts only.
What we don't claim
We do not currently hold formal third-party security certifications (such as SOC 2 or ISO 27001), and we have not commissioned a formal third-party penetration test. If that changes, this page will be updated to reflect it accurately.
Responsible disclosure
If you believe you've found a security vulnerability in Trovid, please report it via the Contact page rather than disclosing it publicly, and we'll investigate.