goodoff.
Security

Your data is yours.

Your trust is our priority. Here's how we protect your study data and privacy with enterprise-grade security measures and transparent practices.

What we build in

Security by default.

Six safeguards baked into every layer of the platform — not bolted on later.

End-to-end encryption

All your study data is encrypted both in transit and at rest using industry-standard AES-256 encryption.

Secure authentication

Multi-factor authentication, strong password requirements, and OAuth integration for maximum account protection.

Zero-knowledge architecture

We cannot access your personal study content. Your data is encrypted with keys only you control.

Secure infrastructure

Hosted on enterprise-grade cloud infrastructure with 99.9% uptime and automatic security updates.

Privacy by design

We collect only the minimum data necessary and never sell your personal information to third parties.

Access controls

Granular permissions system allowing you to control exactly who can access your shared study materials.

Third-party audits

Independently verified.

We meet the highest industry standards for data protection and privacy.

SOC 2 Type II

Independently audited for security, availability, and confidentiality.

GDPR compliant

Full compliance with European data protection regulations.

CCPA compliant

Adherence to California Consumer Privacy Act requirements.

COPPA compliant

Safe platform for users under 13 with parental consent features.

How we operate

Our security practices.

We implement comprehensive security measures across all aspects of our platform, from development to deployment and ongoing maintenance.

Daily discipline

  • Regular security audits and penetration testing
  • Automated vulnerability scanning and patching
  • Employee security training and background checks
  • Incident response plan with 24/7 monitoring
  • Regular data backups with geographic redundancy
  • Secure development lifecycle (SDLC) practices
  • Third-party security assessments and code reviews
  • Network security with firewall and intrusion detection

Security report

Our latest security assessment results.

99.9%
Uptime
0
Data breaches
24/7
Monitoring
A+
Security grade
Disclosure

Responsible reporting.

Security researchers and users who discover potential vulnerabilities can report them through our responsible disclosure program.

How to report

Email [email protected] or [email protected].

  • PGP key available on request
  • Include detailed reproduction steps
  • We respond within 24 hours

Our commitment

  • No legal action for good-faith research
  • Credit given for valid reports
  • Coordinated disclosure timeline
  • Bug bounty rewards available
Still have questions?

Our security team is listening.

We're available to address any concerns or questions about how we protect your data.

Security — GoodOff