Security

Kevin Fax

Our Commitment

All infrastructure is self-hosted on dedicated bare-metal servers. No multi-tenant cloud. Your fax documents are processed on hardware we physically control.

Document Handling

• Temporary processing only — uploaded PDFs are deleted immediately after fax transmission
• No document storage — we do not retain copies of your faxed documents
• Fax history — stored locally in your browser (localStorage), never sent to our servers

Infrastructure

• Encryption at rest — LUKS full-disk encryption on all servers
• Encryption in transit — TLS 1.2+ for all external connections, WireGuard VPN internally
• Network isolation — reverse proxy gateway, firewall rules, Kubernetes network policies
• Audit logging — all actions logged with timestamp and retention policies

Compliance

SOC 2 Type I audit completed August 2026 covering Security, Confidentiality, and Privacy.

Vulnerability Disclosure

Report vulnerabilities to security@foundermanage.com. We acknowledge within 48 hours and do not take legal action against good-faith researchers.