We are a small team and we run our own infrastructure. That makes it easy to explain exactly where your data lives and who can touch it.
| Area | What we do |
|---|---|
| Location | Primary storage and backups in Switzerland. No replication outside the country. |
| In transit | TLS 1.3 only, HSTS, modern ciphers. Certificates renewed automatically. |
| At rest | AES-256 encryption per transfer, keys stored separately from data. |
| Access | Two-factor sign-in, role-based permissions, audit log per workspace. |
| Retention | Transfers are deleted at expiry. Deleted data is not kept in backups longer than 7 days. |
| Staff access | Only two engineers have infrastructure access, always with hardware keys and logged sessions. |
If you believe you have found a security issue, please write to security@24connect.space. We reply within two working days. See also our security.txt.
We use a Swiss data centre operator for colocation and a European email provider for transactional mail. We do not use advertising or analytics services.