← Back to ORIGOOO
CLEAR EXPECTATIONS

Security practices

Operator policy draft · Commercial launch requires completed operator details and legal review.

Passwords use Argon2id where available, keys are HMAC digests, sensitive outbox payloads are encrypted with AES-GCM, writes require CSRF protection, and quotas commit with audit records. Configure HTTPS, secure session storage, restricted operator access, backups, monitoring and a reviewed incident contact before launch.

Privacy notice · Service terms

YOUR NEXT BUILD STARTS HERE

Get your free API key.

1,000 monthly credits. No credit card required.

Account services are not connected in this preview. Explore the dashboard or download the implementation from your workspace.
Read the integration guide

Production accounts require verified email. Google OAuth and Paddle need deployment credentials.