How Delrity protects your data

A short, honest summary of what is actually in place.

Your account

• Passwords are hashed, never stored in a readable form.
• A password policy is enforced on our servers, not only in the browser form.
• Sign-in, sign-up, password-reset and verification requests are rate limited.
• Email verification is required before an account is activated.
• You are emailed when your password changes.

Your websites

• Everything is served over HTTPS, with certificates issued and renewed for you.
• Uploaded images are checked by their actual content, not their file name, so a renamed file cannot smuggle something else in.
• Your workspace's data is isolated from every other customer's, and that isolation is covered by automated tests.

Your store

• Your payment provider's credentials are encrypted before storage and never returned to a browser.
• Prices, discounts, availability and totals are always recalculated on our servers - the browser is never trusted for money.
• An order is marked paid only on an authenticated confirmation from your payment provider.
• Delrity never touches your customers' card details. Those go straight to your provider.