Security tightening across the platform
Published 7 October 2026 by Adrian Angol-Henry · Prompted by internal audit
Live from 05/10/2026. We carried out a security review and fixed what it found. Sensitive account data is never returned by the platform, uploaded files are checked more strictly, each application now runs with its own limited access, and unnecessary outgoing connections are monitored. Our session security was refreshed in a way that keeps you signed in and keeps emailed links working. We also stopped sending visitors' addresses to an outside lookup service and hid email addresses and phone numbers in our technical logs.