Security
How we protect your data
- Separation by the database: each workspace's data, and each member's questions, are separated by rules the database itself enforces.
- AI models do not see your data values. Our software calculates every number in an answer.
- Two-step verification for owners and admins.
- Limited, logged access for our team: access to values in your data needs a written reason, expires automatically and is logged. Your workspace's activity log shows changes our team makes.
- Encryption in transit and at rest, and encrypted backups.
The full list is in Annex A of our Data Processing Agreement.
Reporting a vulnerability
If you believe you have found a security vulnerability in Memlira, email [email protected].
- Include what you found, how to reproduce it, and its impact.
- We will reply within 3 business days.
- Please give us reasonable time to fix it before telling anyone else.
Good faith: if you follow these rules, we will treat your research as authorised, and we will not take or support legal action against you for it. The rules:
- test only your own account, or the public example;
- do not access, change or delete other people's data; if you reach any, stop and tell us;
- do not degrade the Service (no denial of service, spam or large automated scans);
- no social engineering or physical attacks.
security.txt
Published at https://memlira.com/.well-known/security.txt:
Contact: mailto:[email protected]
Expires: 2027-10-18T00:00:00.000Z
Preferred-Languages: en, ar
Policy: https://memlira.com/security
Canonical: https://memlira.com/.well-known/security.txt
Expires must be renewed before that date.