Protection
Defence in every layer.
Encryption everywhere
Data is encrypted in transit and at rest.
Account isolation
Every account is strictly separated from every other.
Threat lockouts
Repeated suspicious sign-in attempts trigger automatic lockouts.
Verified integrations
Every message from your connected bots is verified before it’s trusted.
Hashed credentials
API keys are shown once and stored only as irreversible hashes.
Complete history
Sensitive actions are recorded in a permanent security log.
256-bit
Encryption in transit
0
Bot tokens stored
15 min
Lockout window
100%
Actions logged
Your controls
Security you can see.
Manage your password, API keys and connected bots from one place. Revoke anything instantly.
- ◆Change your password any time
- ◆Create and revoke API keys
- ◆Disconnect bots in a click
Our practices
How we operate.
01
Least privilege
Access is granted only where it’s needed, and nowhere else.
02
Continuous monitoring
Unusual activity is detected and acted on automatically.
03
Rapid response
Threats are contained quickly and transparently.
Encryption ✦Isolation ✦Lockouts ✦Verification ✦Hashing ✦Audit trails ✦Least privilege ✦Encryption ✦Isolation ✦Lockouts ✦Verification ✦Hashing ✦Audit trails ✦Least privilege ✦
Your data
What we do — and never do.
We never
- —Sell or rent your data
- —Claim ownership of your apps
- —Store your bot tokens
- —Show your private work publicly
We always
- ◆Keep your work private by default
- ◆Let you export and delete your data
- ◆Log sensitive actions
- ◆Notify you of material changes
Security FAQ
Security questions.
How do I report a vulnerability?
Email security@iosfactory.app. We respond to every responsible disclosure.
Can I delete my data?
Yes. Contact support and we’ll remove your account data.
Who can see my apps?
Only you — until you approve an app, at which point it appears in your brand’s public showcase.