Monitoring & audit
Sensitive actions are written to an append-only audit trail with actor and source IP. Automated anomaly detection watches access patterns, brute-force attempts are throttled by rate limiting, and repeated failed sign-ins trigger account lockout.
What this looks like in practice
- Sensitive actions are written to an append-only audit trail with the actor and source IP.
- Automated anomaly detection watches access patterns continuously.
- Brute-force attempts are throttled by rate limiting.
- Repeated failed sign-ins trigger account lockout.
Why it matters
Append-only means the trail can't be quietly edited after the fact — what happened is what's on record. And detection runs around the clock, not just when someone thinks to look.
- Append-only audit trail
- Actor + source IP
- Anomaly detection
- Account lockout
Have a security question?
We're happy to walk through our practices in more detail, share documentation, or hear about a concern. A human reads every note.
This page describes our security posture at a high level for transparency; it is not a contractual commitment.