Security

Security is a first-class concern at LeMans Labs OÜ. This page summarizes our technical and organizational measures (GDPR Article 32). Report issues to [email protected].

Data protection

• Encryption in transit (TLS 1.2+) and at rest.
• Least-privilege access; secrets isolated and never committed to source control.
• Strict separation between internal operations and the customer-facing product stacks.

Infrastructure

• Reputable EU/EEA-region cloud hosting and CDN with security headers (CSP, HSTS).
• Automated dependency and vulnerability monitoring.
• Backups with tested restoration.

AI providers as sub-processors

Model providers are used under data-protection terms that prohibit training on your data without consent. Routing sends only the data needed for each task.

Responsible disclosure

We welcome good-faith security research. Email [email protected] with details; we will acknowledge and work with you on a fix. Please do not access other users' data or degrade the service.