This page provides a high-level overview of Threadline's security practices and does not modify or replace any contractual obligations described in the Terms, Privacy Policy, or Data Processing Agreement.
Threadline is committed to protecting customer data and maintaining the security and reliability of the platform. We implement a range of technical and organizational safeguards designed to protect information processed through the Service.
Infrastructure
Threadline relies on modern cloud infrastructure providers to operate the platform, including secure database and authentication services. Data is stored in professionally managed cloud environments designed to provide high availability, reliability, and operational resilience.
Encryption
Threadline uses encryption to help protect data processed through the Service, including:
- Transport Layer Security (TLS) encryption for data in transit
Encryption at rest where supported by the underlying infrastructure providers
Access Controls
Access to internal systems and production infrastructure is restricted to authorized personnel. Authentication and role-based access controls are used to limit access to systems and data required for operational purposes.
Monitoring and Logging
Threadline monitors platform activity and system logs to support service reliability and help detect potential security issues or suspicious activity.
Third-Party Service Providers
Threadline relies on trusted third-party service providers to operate parts of the platform infrastructure, including:
- Supabase — database and authentication infrastructure
- OpenAI — artificial intelligence processing services
- Stripe — payment processing services
These providers maintain their own security and compliance programs designed to protect the systems and services they operate.
Responsible Disclosure
Threadline takes security issues seriously. If you believe you have identified a potential security vulnerability affecting the platform, please report it to:
We will review all reports promptly and work to investigate and address valid security issues as quickly as reasonably possible.