Safeguards

PeopleSlip describes the controls in the product. This page is not a promise that an account or a document meets any legal or regulatory standard.

• Passwords are hashed. Reset links expire and work once. Replies do not reveal whether an email is registered.
• Sign-in uses an HttpOnly cookie, a short inactivity timeout, and a second step.
• Each account's records are separated, including database row policies.
• Notice emails omit the substance of a document. Web addresses do not carry the answers.
• You choose how long documents are kept: 3, 5, 7, or 10 years, or none.

Security questions go through the contact form. Do not include other people's private details.