Security at Annalytick
Last updated: February 17, 2026
Security is foundational to everything we build at Annalytick. We understand that you trust us with your data and credentials, and we take that responsibility seriously. This page outlines the measures we implement to keep your data safe.
Encryption in Transit
All data transmitted between your browser and our servers is encrypted using TLS 1.2+ (HTTPS).
Encryption at Rest
All stored data, including scraped datasets and backups, is encrypted at rest using AES-256 encryption.
API Key Security
API keys are encrypted before storage. Only a prefix is stored in plaintext for lookup. Keys support configurable expiration.
Authentication
We use secure session-based authentication with support for OAuth providers (Google, GitHub) and email verification.
Access Controls
Role-based access control ensures team members only see data they are authorized to access within their organization.
Incident Response
We maintain an incident response plan and will notify affected users within 72 hours of discovering a data breach.
Infrastructure Security
- Application hosted on secure, SOC 2 compliant cloud infrastructure
- Database connections are encrypted and restricted to application servers only
- Regular automated backups with point-in-time recovery capability
- Network-level firewalls and intrusion detection systems
- Automated vulnerability scanning and dependency auditing
Application Security
- Input validation and sanitization on all user inputs
- Protection against common web vulnerabilities (XSS, CSRF, SQL injection)
- Secure HTTP headers and Content Security Policy
- Rate limiting on authentication and API endpoints
- Passwords hashed using industry-standard algorithms (bcrypt)
Data Handling
- Scraped data is isolated per organization — no cross-tenant data access
- API keys are shown only once at creation time and cannot be retrieved afterward
- Revoked and expired API keys are immediately rejected
- Data deletion requests are processed within 30 days
Responsible Disclosure
If you discover a security vulnerability in Annalytick, we encourage you to report it responsibly. Please email security@annalytick.com with details of the vulnerability. We will acknowledge your report within 48 hours and work to resolve the issue promptly. We ask that you do not publicly disclose the vulnerability until we have had a chance to address it.
Contact
For security-related questions or concerns, contact our security team at security@annalytick.com.