Security

We take care to protect the information you trust us with. Here is what we do today. We list real measures only; no system is perfectly secure.

What we do

• Connections to TRYSA are encrypted with HTTPS (TLS).
• Data is stored with a managed database and cloud provider with encryption at rest.
• Access to workspace data is controlled with role-based permissions and database-level row security, so one workspace cannot read another's.
• Passwords are handled by our authentication provider and are stored hashed, never in plain text.
• Public endpoints (such as login helpers, payment links, and forms) have rate limits, and gallery PIN guessing is throttled.
• The app sends security headers (such as no framing and strict content-type handling) and uses restricted internal functions for sensitive actions.
• Payments are processed by a licensed payment partner; card numbers do not touch our servers.
• We keep security logs, review third-party access and limit staff access to what is needed.

What you should do

• Use a strong, unique password and keep your devices updated.
• Only give staff the roles they need, and remove access when someone leaves.
• Share gallery links and PINs only with the intended person.
• Tell us immediately if you notice anything unusual.

Report a vulnerability

Email security@trysa.app with details. Please give us reasonable time to fix an issue before disclosing it, do not access other people's data, and do not disrupt the service. We will acknowledge reports and keep you informed.

Incidents

If a personal-data breach occurs we will investigate, contain it, and notify the NDPC and affected people when the law requires.