Security

Security at mrq

Your code is your most valuable asset. Here's how we protect it.

End-to-End Encryption

Your code is encrypted on your machine before it leaves. We use industry-standard AES-256 encryption with per-user keys. We cannot read your source code.

Zero Knowledge

We store encrypted data only. File contents are not visible to our systems or team. Only you can decrypt your snapshots.

Secure Infrastructure

Hosted on secure cloud infrastructure with encryption at rest and in transit. All connections use modern TLS encryption.

Secure Authentication

API keys for CLI authentication are hashed before storage. Revoke keys instantly from the dashboard if needed.

How We Protect Your Data

Encryption

All file content is encrypted client-side before upload. Encryption keys are derived from your account and never leave your machine in plaintext. Even if our servers were compromised, your code would remain unreadable.

Data Storage

Encrypted snapshots are stored in private cloud storage with server-side encryption. Data is isolated between users at the database level. No public access to storage.

Access Control

Only you can access your workspaces and snapshots. API keys are hashed and can be revoked at any time. Rate limiting prevents abuse.

Network Security

All data in transit is encrypted with TLS. API endpoints are protected against common attacks. Webhooks use signature verification.

Privacy

What We Can't See

Your source code content
File contents in snapshots
The actual code you're writing

What We Handle

Minimal metadata for functionality
No selling or sharing of data
Data deletion available on request
.gitignore respected by default

Security Questions?

For security inquiries, vulnerability reports, or enterprise requirements: