All data between your browser and SHIP is encrypted using TLS 1.2 or higher.
Product integrations (GitHub, Jira, Confluence, Linear, Notion, Slack) are designed for read-only access wherever vendor APIs allow. Credentials and API tokens are stored encrypted and never logged in plain text.
The SHIP website is hosted on Vercel with automatic HTTPS. Infrastructure follows AWS security best practices where applicable.
If you discover a security vulnerability, please report it responsibly by emailing security@shipplatform.ai. We aim to respond within 72 hours and will keep you informed as we address the issue.
Please do not publicly disclose vulnerabilities before we have had a reasonable opportunity to investigate and remediate.