Security

Encryption in transit

All traffic between your browser — or the API, CLI, and MCP clients — and the Diafunc platform is encrypted with TLS. There is no unencrypted access path.

Account security

Passwords are never stored in plain text; they are stored only as salted bcrypt hashes. Sign-in runs on our own OpenID Connect identity service — no third party sits in your sign-in path. API access uses dedicated tokens that carry only the permissions you grant them and can be revoked at any time.

Where your data lives

The platform runs on dedicated servers operated by Hetzner in their German (Falkenstein, Nuremberg) and Finnish (Helsinki) data centres — all within the EU/EEA. Diafunc is an Austrian company, and our infrastructure, data storage, and email delivery are operated within the European Union.

Backups

Your data is backed up daily, with incremental snapshots throughout the day. Backups are encrypted and stored offsite with two independent EU providers, on an append-only basis — a past backup cannot be silently altered or deleted from the platform. We verify on a weekly schedule that backups can actually be restored.

Access control

Your projects are private by default and shared only when you choose, with the access level you choose. Production systems use role-based access control, application services get isolated database access with only the permissions they need, and administrative actions are logged.

Operational practices

We review our dependencies for known vulnerabilities on a regular basis and keep the platform's components current. Technical error reports from the application never include your data or content — only the information needed to find and fix the defect.

What we do not claim

We hold no security certifications and do not pretend otherwise. This page lists the measures we operate, so you can judge them directly — the same way a discovered model shows its work. Details on personal data are in our privacy policy.

Reporting a concern

If you believe you have found a security problem in the Diafunc platform, please write to contact@diafunc.com. We read every message and take these reports seriously.

No method of transmission or storage is absolutely secure, but we take all reasonable steps to keep your data safe.