Encrypted in transit
The site is served over HTTPS and sends a Strict-Transport-Security header.
Security at moveos
Access is by invitation. The controls below are what the product actually enforces.
Controls
Where it runs
The app runs on Cloudflare Workers, with file storage on Cloudflare R2 and the database on Postgres.
Who can see what
Role-based access limits what each person can open. Multi-factor authentication is available on accounts.
Organisation scope
Records and API calls are scoped to the organisation on the account. API keys are created in Settings and can be turned off there.
Invitation only
There is no public sign-up. An account exists because someone invited that person.
Report a problem
Write to hello@moveos.co or use the contact form. This page does not publish a separate security desk.
Security questions
If you find a problem, email hello@moveos.co or use the contact form.