Security

Last updated August 17, 2026

Visit the Sandtime.io Trust Center for details about data ownership, EU hosting, backups, product privacy, service providers, and related legal resources.

Security and privacy of our users are paramount. While we do not currently operate an official bug bounty program, we welcome and encourage all security researchers and individuals to report any potential vulnerabilities or security issues they may discover. All reports submitted will be carefully reviewed and examined on a case-by-case basis.

Please reach out to us via security@sandtime.io.

The same contact, this policy, and these acknowledgements are published in machine-readable form at /.well-known/security.txt, following RFC 9116.

Security acknowledgements

We are publishing these credits to express our appreciation for those who responsibly reported potential security vulnerabilities and to sincerely thank them.

Credits

August 2024

July 2024

October 2023

Related pages

Security is one part of how Sandtime.io handles your data. These pages cover the rest.

Trust Center

Where the data lives, who processes it, and how GDPR roles are split between your organization and Sandtime.io.

Open page

Subprocessors and Connected Services

The subprocessors, website services, authentication providers, and optional integrations Sandtime.io relies on.

Open page

Privacy Policy

What Sandtime.io collects, why it collects it, and what it never does - no screenshots, keystrokes, or activity scores.

Open page

Data ownership

Your organization stays the controller of its workspace data, hosted in the EU and exportable in one click.

Open page