Trust
Security
Real controls, honest limits, and a clear route for reporting issues.
Last updated: July 18, 2026
1. Architecture and access
- Web, API, worker, database, and queue are separated by function.
- Sessions use HTTP-only cookies with SameSite and Secure in production.
- Secrets stay outside the repository with service-limited permissions.
- Request limits, input validation, and explicit job states.
2. Data and providers
- Transport is encrypted through HTTPS in production.
- Storage uses private credentials and temporary URLs where appropriate.
- Consumption, jobs, and sensitive operations are traceable.
- Provider disclosure is limited to transcription, summarization, voice, or payment.
3. Continuity and response
Infrastructure includes health checks, backups, and periodically tested restoration. Absolute availability cannot be guaranteed.
A confirmed incident is assessed, contained, documented, and reported where required.
4. Your role and responsible disclosure
Use a unique password, protect your device, sign out on shared computers, and avoid unnecessary data.
Report vulnerabilities to support@minuteminds.cloud with reproduction steps, without accessing, changing, or disclosing others' data.