Security FAQ

We occasionally get questions about security at Preceden. Here are a few things to know. For the full picture, including how we handle encryption, secrets management, backups, and monitoring, read our security overview.

Has Preceden ever been hacked?

No. Preceden launched in 2010 and there has never been a data breach.

Where is Preceden hosted?

Preceden is a Ruby on Rails app hosted on DigitalOcean, deployed to DigitalOcean's New York region (NYC1) in the United States.

Is my data encrypted?

Yes, in transit. Every connection to Preceden runs over HTTPS, and billing information is handled entirely by our PCI-compliant payment providers (Stripe and PayPal) rather than stored by us.

Does Preceden have any security certifications?

Preceden itself does not hold one yet. It is hosted in DigitalOcean's SOC 2 Type II audited data centers, and our security overview lists the standards DigitalOcean complies with. If you need Preceden to hold a certification of its own, let us know at [email protected] so we can prioritize it.

How do I report a security vulnerability?

Email [email protected] with the details and the steps to reproduce it. We welcome responsible security research and disclosure, and valid findings will be considered for compensation.