Security

Security

Effective October 29, 2026.

Farside Research is built around organization-scoped access, short-lived credentials, and an evidence trail for sensitive actions.

Application security

Every tenant-owned lookup includes organization scope. API keys are hashed, plaintext is shown once, and revocation invalidates authentication caches. Sessions rotate refresh tokens.

Infrastructure and data

Traffic is encrypted in transit. Stored artifacts use server-side encryption. Production services use private networking, least-privilege identities, and isolated deployment resources. No system is perfectly secure, and this page describes our practices rather than a guarantee.

Reporting

Send suspected vulnerabilities to support@farsideresearch.com with reproduction details. Do not access another customer’s data or disrupt service while testing.