Security

Effective 22 October 2026 · PYRICATO PRODUCTIONS LLC

Your data is the product's foundation. Here's how we protect it.

• Encryption. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Local-first desktop data is encrypted on your device.
• Your choice of sign-in. Use a password, passkey, device pairing, email code or recovery code. Passwords are stored as salted scrypt hashes. Password-reset links work once and expire after 20 minutes.
• Right people, right access. Role-based access: everyone sees only the workspaces and controls their role needs. Shared links can expire or work only once.
• Every change traceable. Records keep who changed what, and when.
• Checked before it's saved. Server-side validation and request protection on every form and update.
• Separated data. Each customer's workspace data is logically separated.
• Backups. Encrypted daily backups, kept 35 days, restore-tested quarterly.
• Signed software. Desktop installers and updates are code-signed (Apple notarised, Windows signed).
• Monitoring. Errors and unusual access are logged and alerted.
• Incidents. If something goes wrong, affected customers hear from us within 48 hours, with what happened and what we're doing.
• AI. AI providers process only what a feature needs and don't train on your content.
• Report a problem: info@spectreworkflows.com. We respond within 2 business days and won't take action against good-faith researchers.