Trust · working draft
Security at Hidden Ties
How accounts, workspaces and research data are protected.
Working draft. Hosting, authentication and payment vendors, regions, certifications and penetration-test receipts are publication dependencies. No certification is claimed here.
Identity and sessions
Passwordless sign-in with emailed codes or Google. Sessions can be reviewed and revoked from Security and sessions. Sign-out clears private cached research state.
Workspace isolation
Lists, notes, saved searches, exports and request history are scoped to a workspace and to role-based permissions. Links to private objects do not grant access.
Payments
Card details are handled by the payment provider’s secured form; Hidden Ties does not store card numbers. Hidden Ties does not collect or store card data.
Reporting a security issue
Use the dedicated form. We acknowledge receipt and coordinate disclosure; no bounty programme is implied.