Trust
Security at RenewOS
Trust through deterministic rules and transparent architecture — not through analyzing your data.
PBKDF2
Salted password hashing
0
Cloud AI / model training
20 MB
Attachments, private storage
Anytime
Export CSV / JSON / ICS
No cloud AI — by design
No AI server ever sees your documents. Reminders, status calculations and reporting are deterministic, auditable rules that behave the same way every time — and the optional "Detect expiry date" scan is plain text recognition that runs entirely on your own device. Your content is never used to train models.
How we protect your data
Six controls, always on
Authentication
PBKDF2 salted password hashing. Rate-limited login with temporary lockout. Individually revocable sessions. Single-use, time-limited reset tokens.
Authorization
Server-side ownership checks on every protected request. Cross-user and cross-workspace data access is blocked at the database query level.
Private attachments
Files live in private cloud storage. Downloads require a signed, short-lived URL generated only for your authenticated session.
Audit logging
Security-sensitive admin actions are recorded with timestamps and actor identity. You can review and revoke all your active sessions.
Reminder safety
Reminders are deduplicated by an idempotency key tied to the item, rule and target expiry. Archived items stop generating reminders. Retries are bounded with exponential back-off.
Data portability
Export everything as CSV, JSON or ICS at any time. Delete your account at any time. No data hostage situations.
Plain language
What we store, where, and who can see it
| What | Where it lives | Who can see it |
|---|---|---|
| Item records (names, dates, providers, amounts) | Encrypted-at-rest application database | Only you (and your workspace members, on Business) |
| Attachments (PDF, PNG, JPEG, WebP · 20 MB max) | Private object storage — never a public bucket | Only you, via signed short-lived URLs tied to your session |
| Credentials | PBKDF2 salted hashes — never plaintext | Nobody, including us |
| Email address | Application database — used only for reminders and account notices | Only us. Never sold, never shared with third parties |
| Reminder delivery logs | Idempotent event records, retained for reliability | Used to deduplicate and retry — not for profiling |
Encrypted at rest
Strong access controls and encryption at rest for stored data. Transport is protected end to end.
GDPR-aligned rights
Access, correction, export and deletion of your data. Read the Privacy Policy for the full picture.
Delete means delete
Account deletion removes your data. Export first — we can't recover what you've asked us to erase.
Responsible disclosure
Found a security issue? Email [email protected] immediately with "SECURITY" in the subject. We investigate every report within one business day and credit responsible researchers. Please do not publicly disclose the issue until we've had a chance to fix it.