Security

Sovereign hosting

The application and its databases are hosted at Scaleway, in a data centre in the Paris region. Contact extraction runs on Infomaniak's infrastructure, in Switzerland. No content is sent to a US artificial intelligence provider, and nothing is used to train a model.

Organisation isolation

Each organisation has its own database, served on a dedicated subdomain. Isolation is not a filter applied to queries — it is a physical boundary between files that a query cannot cross. There is no cross-customer enrichment.

Encryption and transport

• All traffic is served over HTTPS, with permanent redirection and cookies restricted to secure connections.
• Passwords are hashed with bcrypt and never stored in clear text.
• API keys are displayed once at creation, then kept as a SHA-256 digest and can be revoked at any time.
• Two-factor authentication secrets are encrypted at rest.

Access and authentication

• Sessions rely on a signed cookie that is revoked on sign-out.
• Member invitations use a single-use, time-limited token.
• Roles separate the organisation owner from its members and restrict sensitive actions to the owner.
• Access to the internal back office is restricted to a named list and protected by a second factor (TOTP).

Minimisation and destruction

The forwarded email is destroyed as soon as its contacts have been extracted — whether the analysis succeeded or failed — and a safety job destroys it in any case no later than eight hours after it arrives. We keep no archive of your correspondence.

When an organisation is deleted, the customer database and its files are permanently destroyed after a thirty-day recovery window.

Outbound integrations

Webhooks are signed with HMAC SHA-256, timestamped and subject to a five-minute replay window, so your system can verify the origin of every call. The verification procedure is documented in the API reference.

Logging

Sensitive actions — suspension, deletion, role changes, key creation and revocation — are logged along with their author. Application errors are collected and tracked until they are fixed.

Reporting a vulnerability

If you believe you have found a flaw, write to help@foxpersona.com with what is needed to reproduce it. We acknowledge receipt as quickly as we can and keep you informed of the fix. We ask that you do not disclose the flaw before it is fixed, and that you never access other users' data.