Security
Security you can check.
Two-step sign-in on your account, scans and safeguards on your apps, payments that stay with Stripe, and a company you can write to.
What protects you, and where it is written.
Two-step sign-in
A password alone is not enough
With two-step sign-in on, a password alone is not enough: every sign-in also asks for a 6-digit code from an authenticator app on your phone, including a sign-in with Google, GitHub or Apple.
Two-step sign-in
Recovery codes, for the day you lose your phone
Recovery codes are for the day you lose your phone. You get ten when you turn two-step sign-in on, and they are shown only then.
Two-step sign-in
A new phone, without starting again
Move to a new phone asks for a code from the phone you use now, then shows a QR code for the new one.
Data kept apart
Each record belongs to the person who saved it
By default a record is read and changed only by the person who saved it, plus your team if you have marked some accounts as team.
Data kept apart
A collection anyone can read closes in one click
When an issue is a collection anyone can read, Require sign-in or Close to your team closes it on the spot, without a change to the code.
Data kept apart
Apps private to your workspace
On Business, an app can be made private, so only signed-in people from your workspace open it.
Payments through Stripe
Buyers pay on Stripe's own page
Buyers pay on Stripe's own checkout page, never on a card form in your shop, and the money goes straight into your Stripe account.
Payments through Stripe
Your Stripe key stays with Setherion
The secret key of your Stripe account never sits in the shop. The published shop asks Setherion, which holds it.
Payments through Stripe
An order is only a payment that happened
An order is written by Stripe when a payment really goes through, not when a browser comes back, so nothing here is a purchase that did not happen.
A company in the EU
Your app's data is kept in Ireland
Records and accounts are kept in Ireland, in the EU, the same for every app.
A company in the EU
A company registered in Romania
Setherion is run by NETIXDAV SRL, a company registered in Romania, which is the controller of the personal data described here.
A company in the EU
Your data requests, answered within a month
We answer within one month, and tell you if we need longer.
Lose your phone, not your account.
Each code lets you in once. On the two-step sign-in screen, press Use a recovery code instead and type one.
Two-step sign-in and recovery codes, in the documentationAlways on, without a scan.
A secret key never goes live
A secret key written into the app's code is never published. The publish is refused, free of charge, whatever the scan says.
Keys stay on our servers
The keys of connected services stay on Setherion's servers, and the published app calls through Setherion.
Everything travels encrypted
Everything travels encrypted. Passwords are hashed, and access tokens for connected services are encrypted before they are stored.