As of September 12, 2022
Cloudflare provides our firewall, DDoS, rate limiting and SSL/TLS services. We utilize full end-to-end SSL/TLS encryption.
Vercel hosts our front end services. Their infrastructure is SOC2 compliant, and all data stored on their servers is encrypted at rest. Full technical specifications can be read on their website:
https://vercel.com/security#faqs
PlanetScale hosts our database. Connections between PlanetScale and Vercel require a TLS session to be established before any information is exchanged. Their infrastructure is SOC2 compliant, and PlanetScale encrypts all data at rest. Full technical specifications can be read on their website:
https://planetscale.com/docs/concepts/security
Personally identifiable information is encrypted (AES 256) by our system before it is sent to PlanetScale. Encryption is done on an individual user basis. Decryption cannot be performed by anyone other than the user that encrypted the data.