Trust & safety
Security at TraceAIble
We ask you to trust us with the details you want to protect — so protecting them is the core of the product, not an afterthought. Here are the controls we have in place.
Encryption everywhere
All traffic between your device and TraceAIble is encrypted with TLS, and your data is encrypted at rest in our database and backups.
Two-factor authentication
Every account can require a second factor — an authenticator app code or an SMS code — before sign-in completes. We recommend turning it on in Settings.
Row-level data isolation
Your results are locked to your account at the database level. No other user can read your findings, even by guessing a link — the rules are enforced by the database itself, not just the app.
Consent before every check
Nothing is checked until you explicitly agree. Your consent history is recorded and visible in the Privacy Center, and you can withdraw it at any time.
Sensitive-action alerts
Sign-ins and important account changes are monitored, and you can opt into email and text alerts so you know the moment something changes.
Real deletion
Deleting your account removes your personal data from live systems promptly and from backups within 30 days — not just hidden from view.
On-device reports
Deep Scan reports are generated in your browser and never uploaded to our servers, so the most sensitive summary of your exposure stays on your device.
Least-privilege access
Internal access to production data is restricted to the minimum needed to operate the service, and administrative actions are logged.
Found a vulnerability?
We take every report seriously. If you believe you've found a security issue, email security@traceaible.com with the details. Please give us a reasonable window to investigate and fix before sharing publicly — we'll acknowledge your report within 48 hours and keep you updated.