Security
Last updated June 10, 2026
This document is a working template and not yet legal advice. It must be reviewed and approved by qualified counsel before launch.
How we protect your data and our infrastructure. Security is a shared responsibility and an ongoing program.
Encryption
Data is encrypted in transit (TLS) and at rest. API keys are stored hashed, not in plaintext.
Access control
Least-privilege access, audited administrative actions, and scoped API keys per workspace.
Infrastructure
Verification workers run on a controlled, static outbound IP pool required for SMTP probing; services are isolated and monitored.
Responsible disclosure
Found a vulnerability? Email security@correctinbox.com. We appreciate coordinated disclosure and will respond promptly.