Trust Center
Security is our second-most important value, right after synergy. Every NotAPOS deployment is hardened by default, monitored by Brett, and protected by the most powerful cryptographic primitive in the industry: vibes.
Certifications & Attestations
Audit performed by Brett, in front of a mirror, at 2am.
Slightly crooked. Magnet on the fridge. Counts.
Pending forever. The 'pending' is the certification.
We wrote 'compliant' on a sticky note next to the server.
We are not a healthcare company but we got the cert anyway.
Submitted via DM to the official FedRAMP Twitter account.
It does nothing but it's blue and very polite.
Including our own engineers. Especially our own engineers.
NotAPOS Security Whitepaper
4 pages. Includes our threat model, defense-in-depth strategy, and a full-color signature from Brett. Downloaded 8,421 times by people who did not read it.
Security Controls
Subprocessors
A current list of third parties who handle data on our behalf. Updated whenever we remember.
| Vendor | Purpose | Region |
|---|---|---|
| Cloudflare Workers | Everything | Earth |
| OpenAI | All the AI | California |
| Stripe | We wish | — |
| Brett's MacBook | Production database | Brett's apartment |
| A Discord server | Customer support | The cloud |
| Brett's mom | Code review | Phoenix, AZ |
Found a vulnerability? Email security@notapos.io. We will not respond, but we will read it on the toilet.