Security
Security and reliability are part of the product.
Click tracking sits between your ad spend and your landing page. We treat it as critical infrastructure.
Infrastructure
Stateless redirect edge, encrypted PostgreSQL storage, automated backups with 35-day point-in-time recovery.
Encryption
TLS 1.2+ on all tracking domains via automated certificates. AES-256 at rest. Secrets stored in a managed vault.
Access control
Role-based access, API keys hashed with SHA-256 and shown once, session tokens signed with HS256 and rotated on login.
Data minimisation
No raw IP storage, no cookies on the redirect path, configurable retention windows per plan.
Availability
Health endpoint, per-click latency recording, 99.9% SLA on Growth and 99.99% on Enterprise.
Compliance
GDPR-ready DPA, SOC 2 Type II program in progress, annual penetration test by an independent firm.