Security

Hive runs on Cloudflare's developer platform and is served from Cloudflare's global network of data centres, so data may be held outside Australia. The data centre standards are Cloudflare's: ISO 27001, ISO 27018:2019, ISO 27701:2019, SOC 2 and PCI DSS, published on its Trust Hub.

• In transit: every connection uses HTTPS with TLS 1.3.
• At rest: all stored data is encrypted by the hosting platform.

• Service status: cloudflarestatus.com.
• The database keeps a continuous 30-day point-in-time history and can be restored to any minute within it. Files are held in replicated object storage.

• Sign-in is with Google, Microsoft, or a one-time code sent to your email address. Hive stores no passwords.
• Each member holds one role in a hive: owner, admin, member or viewer.
• Each hive keeps an activity log of membership and content changes.

• Members own the content they put in a hive.
• A copy of your data is available on request.
• When you leave or ask us to remove your account, your personal information is deleted within a month, except where we must keep a record by law.
• We do not sell personal information. How it is handled is set out in the privacy policy.

Write to admin@aicolab.org. We acknowledge reports and keep you informed until the issue is resolved.