Security at Ceewire

No AI Training on Your Data

Your proprietary data is never used to train AI models. Your queries and documents remain exclusively yours.

Encrypted Everywhere

All data is encrypted in transit (TLS) and at rest. Sensitive fields — including chat messages, webhook URLs, and email addresses — are encrypted at the application level using AES-128 with HMAC verification. Passwords are stored using NIST-compliant hashing.

Instant Session Control

Short-lived access tokens, secure session rotation, and instant revocation across all devices when you change your password or log out.

Input Validation

Every request is validated against strict schemas. Malformed or unexpected data is rejected before it reaches our systems.

Injection Protection

All database operations use parameterized queries. User input is never interpolated into commands.

Cross-Site Protection

Built-in defences against CSRF and XSS attacks, with strict cookie policies and automatic output sanitisation.

Today

• Automatic TLS termination with managed certificates
• Strict cross-origin policies — only our production domain is allowed
• Network isolation — databases are never exposed to the public internet
• Rate limiting on public-facing endpoints
• Minimal-surface containerised deployments
• Application-level encryption at rest for sensitive database fields

Actively Pursuing

• Comprehensive security headers (CSP, HSTS, and more)
• Automated vulnerability scanning in CI/CD
• Third-party penetration testing
• Data region support (US / Europe) for residency requirements