Security at ZenBuild
We take the security of your data seriously. Here is how we protect it, at a glance.
Encryption in transit
All traffic to ZenBuild is served over HTTPS/TLS.
Encrypted credentials
Integration tokens and other secrets we hold on your behalf are encrypted at rest with AES-256-GCM.
Secure sign-in
Sign in with email and password or Google. Passwords are hashed with bcrypt and never stored in plain text.
Role-based access
Team workspaces use owner, admin, editor, and viewer roles, so you decide who can see and change your data.
Automated backups
Your data is backed up on a daily schedule to separate storage.
Trusted infrastructure
ZenBuild runs on established cloud infrastructure providers.
See sub-processors→Payments via Stripe
Card details are processed entirely by Stripe and never touch our servers.
Enterprise and compliance
Organizations with procurement, security, or compliance requirements can sign a Data Processing Agreement (DPA), and a Business Associate Agreement (BAA) is available for customers handling protected health information. Both are provided on request as part of an Enterprise plan, which can also add controls such as organization-wide multi-factor enforcement and custom data-handling terms. Talk to sales to request them.
ZenBuild provides tools and safeguards that support your compliance program. This page is not a certification. Consult your own advisors for your complete requirements.
Reporting a vulnerability
If you believe you have found a security issue, please email security@zenbuild.io. We appreciate responsible disclosure and will respond as quickly as we can.