Security
What minhOS can show you today about where your data is kept and how it moves. Each fact below was checked against the code or the live site. There is no certification and no uptime figure here, because minhOS has neither.
- Where your data lives
- How data travels
- Card payments
- Signing in
- Found a security problem?
- What this page doesn't say yet
Where your data lives
The minhOS database, sign-in and server code run on Supabase, in the EU: Frankfurt, Germany.
minhos.ai and operators' sites are served through Cloudflare's network.
Error reports go to Sentry and are stored in the EU, in Germany. They are set up not to send personal details by default, and any screen recording kept with an error hides all text, inputs and images.
How data travels
Every page of minhos.ai is served over HTTPS, and a plain HTTP request is sent on to HTTPS. When we checked, the connection used TLS 1.3.
The admin and your site talk to the database over HTTPS too.
Card payments
Travellers type their card details into Stripe's own payment form on the booking page. The card details go to Stripe and never reach minhOS's servers. Payments go to the operator's own Stripe account.
Signing in
Operators sign in through Supabase Auth, with an email and password, a link sent by email, or Google. Two-step sign-in is not offered today.
Found a security problem?
Write to [email protected] with what you found and how to reproduce it. Don't access other people's data, and don't run tests that could harm the service or the businesses on it. We'll tell you when we've read your report and what we're doing about it.
What this page doesn't say yet
Encryption of stored data, backups and the access rules for each part of the database are not described here yet. Each one goes on this page once it has been checked against its source.