Trust center
Everything you need to trust us, in one place.
Our declarations, the cryptography and standards we use, the information we hold and the infrastructure we run on.
Our declarations
- SECURITY ACTION two stars
- A self-declaration under IPA’s programme (Japan).
- Information Security Policy
- The policy we follow as a company, published in full.
Cryptography and standards
- Key exchange
- A hybrid of ML-KEM-768 (NIST FIPS 203) and X25519: keys stay safe if either one holds.
- Data encryption
- AES-256-GCM, with each row and field bound to its own context so ciphertext cannot be swapped.
- Tamper detection
- ML-DSA-65 (NIST FIPS 204) signatures.
- Transport
- TLS 1.3 with post-quantum key exchange (X25519MLKEM768).
- Ready for what is next
- Algorithms can be swapped as new standards (HQC, FN-DSA) become final.
Information we hold
- Free check
- We store neither the URL you enter nor the result.
- Contact form
- Only your email address and message. No name or phone number. Deleted automatically 180 days after we finish.
- Encrypted data
- We never hold the private keys needed to read it.
Infrastructure we run on
- Cloudflare
- Website delivery and attack blocking.
- Supabase (Tokyo region)
- Database and scheduled jobs.
Certifications held by these providers belong to them, not to this service. See each provider’s official pages for details.
Reporting a vulnerability
- How to contact us
- Use the contact form (topic: Other). We will look into every report carefully.
- Please
- Avoid tests that affect other users, and never take data out.