A measured note. No service can promise perfect security, and this page does not. What it describes is careful design, holding as little as the product needs, established protections, and reports taken seriously. The specifics firm up as Sibaya matures.

How Sibaya Works at It

  • Security as Ongoing Work

    Building, reviewing and improving over time, rather than a claim made once.

  • Holding as Little as Possible

    The less that is held, the less there is to lose. Collection is kept proportionate to what the product needs.

  • Layered Protections

    Established measures for data in transit and at rest. The specifics will be documented as they are settled.

  • Responsible Disclosure

    Reports from security researchers are welcome, and valid issues are worked in good faith.

Report a vulnerability

Found Something? Tell Us

If you believe you've found a security issue, please email us privately before disclosing it publicly, and give us a reasonable chance to fix it.

Security disclosures

Please include steps to reproduce and any relevant details. Avoid accessing or modifying other people's data.

We aim to acknowledge valid reports and keep you updated on progress. This is not a paid bug-bounty programme at this time.