Security

Texeno runs on our own secured infrastructure in the European Union, behind Cloudflare.

The companies that handle data for us are on the sub-processors page.

Each project compiles in its own container, isolated with gVisor. In that container:

• there is no network access;
• the system is read-only;
• every privilege is dropped, and your document never runs as root;
• memory, processes, file size and time are limited.

Every connection uses HTTPS, with HSTS.

Tokens for the services you connect (GitHub, GitLab, Dropbox, Google Drive, Zotero and Git servers) are stored encrypted, and so are share links.

Backups are encrypted before they leave our servers.

We back up every night. Backups are encrypted, stored offsite in separate accounts and kept for 30 days. We test a full restore every week.

When you delete your account, it is removed from the backups too.

• Passkeys.
• Two-step codes from an authenticator app, with recovery codes.
• New passwords are checked against known data breaches. The password is never sent for the check: only the first characters of its hash are.
• Sign-in attempts are rate limited.

Stripe handles payments. Card numbers never reach our servers.