Security & trust
Built so a bad night stays a small night.
Dedicated instance, every tier
Every customer, on every plan, gets their own Lightsail instance in eu-west-1 (Ireland). Nobody shares compute, storage, or a database with anyone else.
Encrypted, verified backups
Backups are encrypted before they leave your instance and stored in S3 under a prefix your instance can only write to, never read. We restore a random customer backup every week into a throwaway instance and record the result — a backup we have never restored is a hope, not a backup.
Locked-down network by default
Inbound is 80/443 only. Outbound is deny-by-default: your instance can reach OpenRouter, its own backup prefix, and nothing else you didn't ask for.
Export any time, no lock-in
Structured (CSV/JSON) and full technical (encrypted pg_dump) exports are one click away in the portal while your subscription is active — no support ticket.
Sub-processors
- AWS (eu-west-1) — compute, storage, DNS, email
- Paddle — payments, merchant of record
- OpenRouter — AI inference and underlying model providers