Security by Design.
We aim to bring security considerations into system design early: minimize data, scope access, keep secrets out of source control, and maintain the dependencies our products rely on.
Data Governance
We try to process only the data a feature needs. Hanmelo does not persist raw learner audio by default. Connected mode uses third-party speech and AI services to process audio and text context; their retention practices require separate review before broader testing.
Vulnerability Mgmt
We maintain third-party dependencies as part of development and review security advisories and updates that affect the software we operate.
Identity & Access
Secrets are kept out of source code, and access to infrastructure and external services is scoped to what is needed for development and operation.
Secure Coding
We use input validation, secure defaults, code review, and common web-security guidance such as the OWASP Top 10 when they apply to the system being built.
Have a security inquiry?
To report a vulnerability or ask about our security practices, email us and we will respond as soon as possible.
Contact Us