Built by IT people. Careful with your data.
Obelix is a security product, so we hold ourselves to a high standard. Here is exactly what we do today — and what we don't claim yet.
Protecting your account
- ✓Passwords are salted and hashed with scrypt. We never store them in plain text.
- ✓Email confirmation is required before an account can sign in.
- ✓Sessions end when idle, and you can see and sign out every device.
- ✓Rate limits slow down password guessing and sign-up abuse.
- ✓An activity log records sign-ins and every change in your workspace.
Your data
- ✓Export everything we store about your workspace at any time.
- ✓Delete your account and workspace permanently from Settings.
- ✓We don't sell your information.
- ✓Future Microsoft and Google connections will use their official sign-in — never your passwords.
Our infrastructure
- ✓All traffic is served over HTTPS through Cloudflare.
- ✓Servers sit behind a firewall with only essential access open.
- ✓Automatic security updates and intrusion blocking are switched on.
- ✓The database is backed up every night.
Being straight with you
Obelix is a young company. We haven't completed a formal audit such as SOC 2 yet, and we'll say so clearly when we do. If you need something specific for your compliance requirements, ask us before you sign up.
Found a security problem?
Please tell us. Use the contact form and choose “Security issue” — we read these first.