🔒

Security at ToolCenter

We take the security of your data seriously. Here's how we protect your information and ensure reliable service.

🔐

Encryption

  • ✓ All traffic encrypted with TLS 1.3 — HTTPS enforced on all endpoints
  • ✓ HSTS preload enabled with 1-year max-age
  • ✓ API keys hashed with bcrypt — we never store plaintext keys
  • ✓ Database connections encrypted in transit
🏗️

Infrastructure

  • ✓ Hosted on Hetzner Cloud in Germany (EU data residency)
  • ✓ Cloudflare CDN and DDoS protection on all endpoints
  • ✓ Automated daily backups with 30-day retention
  • ✓ 99.9% uptime with 24/7 automated monitoring
  • ✓ Redis-backed rate limiting to prevent abuse
📋

Data Handling

  • ✓ No persistent storage of processed content — screenshots, PDFs, and scraped data are streamed directly and not stored
  • ✓ API request logs retained for 30 days max (for debugging and abuse prevention)
  • ✓ No third-party analytics on API endpoints — only on the marketing website
  • ✓ We never sell or share your data with third parties
🛡️

API Security

  • ✓ Bearer token authentication on all API endpoints
  • ✓ IP whitelisting — restrict API key usage to specific IPs
  • ✓ Multiple API keys per account for environment isolation
  • ✓ Rate limiting per key with clear X-RateLimit headers
  • ✓ Security headers: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
🇪🇺

Compliance

  • ✓ GDPR compliant — EU data residency, data processing transparency
  • ✓ Stripe for payment processing (PCI DSS Level 1 certified)
  • ✓ Clear Privacy Policy and Terms of Service
  • ✓ Right to data deletion upon request

Questions about security?

We're happy to answer any security or compliance questions for your team.

[email protected]