Trust

Security

Last updated August 20, 2026

Haystack Origins uses layered safeguards designed to protect customer accounts and workspace information. This page describes our current security approach without claiming that any internet service can eliminate all risk.

Infrastructure and transmission

• The production service is hosted on managed Google Cloud and Firebase infrastructure.
• Supported public connections use HTTPS encryption in transit.
• Customer data is separated by authenticated account and workspace authorization rules.

Access and application controls

• Administrative access is restricted to authorized operators.
• Sensitive backend credentials are not placed in the public browser application.
• Protected API operations verify authenticated identity and applicable workspace access.
• Registration and payment processing remain disabled while enrollment is closed.

Payments

When web billing is enabled, payment-card collection will be handled by a dedicated payment processor. Haystack Origins does not intend to store complete payment-card numbers on its own servers.

Reporting a concern

Report a suspected vulnerability, unauthorized access, or security incident to tylerwcondie@gmail.com. Include enough detail for us to reproduce or investigate the concern, but do not send passwords, complete payment-card information, or unnecessary personal information.

Operator