Security and privacy are part of how we build from day one, not a review at the end. You own the code, data and IP we deliver. Here is what we do today and what is still planned.
Documents
How we protect data: encryption, access control and security checks at every step of development.
Read →What personal data we collect, why we collect it, and your rights over it.
Read →Our WCAG 2.2 AA conformance and how to report an accessibility problem.
Read →How we plan, build and check every release: the Oasis Operating System and the Longevity Standard.
Read →Compliance Roadmap
An honest view of where we stand. Items marked Planned are not certifications we hold today.
Privacy built in from the start, consent when data is collected, and support for people's rights over their data.
Every release passes our checks; each user and service gets only the access it needs; third-party libraries are kept up to date.
Putting security controls in place and collecting evidence for an audit.
A formal information security management system.
Report a vulnerability: security@stackoasis.dev · security.txt
We're happy to walk your security, privacy or IT team through how we build, store data and hand over code.