Commitments

Local-first desktop with team sync by choice
No sale of personal data; no ad trackers for cross-site profiling
Card data handled by Stripe (PCI); Etch does not store PANs
Coordinated vulnerability disclosure via SECURITY.md

Baseline controls

TLS in transit; Argon2 passwords; rotating refresh tokens
Workspace secrets encrypted at rest (ChaCha20-Poly1305 AEAD)
Etch-managed provider credentials stay server-side and are never returned to desktop clients
AI jobs retain operational routing and metering metadata for reliability and billing integrity
Members see allowance percentage and reset timing; workspace admins control provider policy and monthly extra spend
Tenant isolation checks on scoped APIs; rate limits on auth
CI security scanning (CodeQL, cargo-audit, web-ci)
Staging isolation; backup + deploy rollback procedures

Hosted AI processors

Image and video generation is routed through fal — Features & Labels, Inc. (fal.ai). Hosted text is routed through OpenRouter. Informal does not claim EU residency for fal inference and does not publish a fal SLA. Which legal entity performs inference for a given model family (including Veo, Sora, Kling, and Seedream) and in which region is unverified until fal replies in writing. The current list is on the Subprocessors page.

Privacy surfaces

Certification roadmap (not yet certified)

SOC 2 Type I readiness when enterprise demand warrants
Independent penetration test residual
ISO 27001 / 42001 evaluation residual
Counsel sign-off to take Terms/Privacy in force

Contact

Security and privacy: contact@weareinformal.com