Security

Our Security Commitment

At Taskiry, security is not an afterthought-it's built into everything we do. We understand that you're trusting us with your team's projects, ideas, and sensitive information. We take that responsibility seriously.

Data Protection

Encryption

• In Transit: All communications use TLS 1.3 encryption
• At Rest: Data stored using AES-256 encryption
• Database: Cloudflare D1 with encryption at rest enabled
• Files: Stored in encrypted R2 buckets with access controls

Infrastructure

Taskiry is built on Cloudflare's global network, benefiting from:

• Automatic DDoS mitigation
• Web Application Firewall (WAF) protection
• Global edge network with 300+ data centers
• Automatic SSL/TLS certificate management
• Rate limiting and bot protection

Access Security

Authentication

• Secure password hashing using bcrypt
• Session management with secure tokens
• Optional two-factor authentication (2FA)
• Automatic session expiration

Authorization

• Role-based access control (Owner, Admin, Member)
• Granular permissions for workspaces and resources
• Audit trails for sensitive actions
• Workspace isolation between organizations

Operational Security

• Monitoring: 24/7 system monitoring and alerting
• Backups: Regular automated backups with point-in-time recovery
• Incident Response: Documented procedures for security incidents
• Updates: Regular security patches and dependency updates

Reporting Security Issues

If you discover a security vulnerability in Taskiry, please report it responsibly. We appreciate your help in keeping our platform secure.

Security Roadmap

We're continuously improving our security posture. Upcoming features include:

Questions?

If you have questions about our security practices, please contact us: