SOC 2 Type II
Our cloud services (website, licensing) are SOC 2 Type II certified. Annual audits by independent third parties.
Gotchi's architecture is designed so you don't have to trust us. Everything runs locally, the core is open source, and we collect nothing.
Our cloud services (website, licensing) are SOC 2 Type II certified. Annual audits by independent third parties.
All local data is encrypted using your system's keychain and disk encryption. Connector tokens use OS-level secure storage.
The Gotchi core is open source under MIT. Security researchers can inspect, audit, and verify our claims.
The app has no server-side component. Your account exists only for licensing - no cloud storage, no telemetry endpoint.
The app collects zero data - there is no telemetry. Aggregate metrics exist only for this website, never inside Gotchi.
Compliant with GDPR, CCPA, and CPRA. Our architecture makes compliance simple - we don't have your data.
Contact security@gotchi.ai for our detailed security whitepaper.