Steady policies

Security

Security is part of how we build and operate Steady. This page summarizes the safeguards and expectations that apply while the product is in development.

Draft for legal reviewThis draft is awaiting legal review. Confirm the responsible entity, contact details, jurisdictions, retention periods, and required disclosures before treating it as final.

Draft revised:

Protective practices

Steady uses authenticated sessions, workspace permissions, HTTPS connections, private file storage, and application logging. Security controls are reviewed as the product develops; no system can be guaranteed free of risk.

Access and account safety

Access is limited according to workspace permissions. Keep sign-in links, API keys, and other credentials private, rotate credentials when needed, and tell us promptly about suspected unauthorized access.

Responsible disclosure

Please report suspected security issues privately to the Steady team with enough detail to reproduce the issue. Do not access, alter, or disclose another person's data while investigating.

Report an issue

For private security reports, email hello@getsteady.work.