Encrypted in transit
All traffic is served over HTTPS with modern TLS, so data moving between you and the Service is encrypted end to end.
Your data, protected
Your team runs on this data. We treat protecting it as a core part of the product, not an afterthought.
Last updated: August 2, 2026
Tenant isolation
Every company's data lives in its own isolated database. Access is scoped to your company so one tenant can never see another's records.
Protected credentials
Passwords are stored using strong one-way hashing — never in plain text. Sign in with Google to skip passwords entirely.
Role-based access
Give each team member exactly the access they need with roles and permissions inside your workspace.
Regular backups
Your data is backed up regularly so it can be recovered. Workspace admins can also export their own data.
Secure by design
Protections against common web attacks — including anti-forgery, authenticated sessions, and input validation — are built in.
Found a vulnerability?
We welcome reports from security researchers. If you believe you've found a security issue, please email security@iterdone.com with the details and steps to reproduce. We'll acknowledge your report, keep you updated, and we won't pursue researchers who act in good faith.