Security
1. How we protect the Service
SLSBMB Limited ("SLSBMB") uses reasonable technical and organisational measures to operate SLSBMB AI, protect customer data, keep audit evidence and prevent abuse. Sign-in uses single-use email links and passkeys, and sessions use secure cookies. Traffic is encrypted in transit, backups are encrypted, and access and important changes are recorded in audit logs. Card details are handled by the payment provider and never reach our systems. The measures that apply to customer personal data are listed in Annex II of the Data Processing Terms. This page does not describe our internal topology, credentials or runbooks.
2. Your responsibilities
Keep your email account, devices and passkeys secure, because sign-in links are sent to your email address. Invite only people who should act for your business, and remove access that is no longer needed. Do not put passwords, API keys or other secrets into interview answers, briefs or messages. Submit business, customer and personal data only when you are authorised to provide and use it. Keep sign-in, invoice and receipt links under your control, and tell us if one may have been exposed. You are responsible for activity in your workspace, as set out in the Terms of Service.
3. Security obligations and limits
No system is completely secure, and we do not guarantee that an incident will never occur. That does not remove our obligations to apply appropriate safeguards, respond to incidents and provide required assistance under the Data Processing Terms and law. Commercial liability is subject to the Terms to the extent lawful. We do not claim an external security certification or customer-specific security standard unless it is expressly identified and supported.
4. Reporting a concern
Send security concerns to a@slsbmb.com. Include a concise description and enough context to reproduce the issue without exposing unrelated data.