Encryption in transit
All traffic between your browser and our servers is encrypted with TLS 1.2+, provisioned through Let’s Encrypt and managed by Vercel and Render.
Trust
Security & Trust
Many of the organizations we serve operate in regulated, mission-critical environments — including public-sector, healthcare, and Fortune-class enterprises. Here is how we protect the information you share with us.
How We Operate
Six commitments that shape every part of the platform.
Encryption at rest
Submission and chat data are stored in MongoDB Atlas with AES-256 encryption at rest, hosted in a hardened region with audited physical access controls.
Access controls
Administrative access to leads and reports is gated by a per-environment admin token. No third party has standing access to your data outside of the contracted sub-processors disclosed in our Privacy Policy.
Vetted infrastructure
We host on SOC 2 Type II–attested infrastructure (Vercel for the front end, Render for the back-end API, MongoDB Atlas for the database, Cloudflare at the edge).
Confidentiality
Assessment responses and chat transcripts are visible only to authorized members of the Freedom In Me team and are used solely to inform our conversation with you.
Ongoing review
We review dependencies, access logs, and our sub-processor list on a regular cadence and apply security patches as they become available.
Sub-Processors
The vendors that help us operate.
We disclose every third party that processes your information. Each is contractually obligated to protect your data and to use it only on our behalf.
| Vendor | Purpose | Region |
|---|---|---|
| Anthropic, PBC | Claude AI model — generates A.L.I.G.N. reports and chat responses | USA |
| Resend, Inc. | Transactional email delivery | USA |
| MongoDB, Inc. (Atlas) | Encrypted database storage | USA |
| Vercel, Inc. | Front-end hosting and CDN | Global edge |
| Render Services, Inc. | Back-end API hosting | USA |
| Cloudflare, Inc. | Edge networking and DDoS protection | Global edge |
Reporting
Report a security concern.
If you believe you have identified a vulnerability or have a security question about Freedom In Me services, please contact us directly. We acknowledge legitimate reports within two business days.
info@itsthefreedominme.com
See also our Privacy Policy & Terms of Use.