Service information
Data-security statement
Application controls
Authenticated tenant checks protect document and result routes. The application validates result hashes, denies expired or deletion-pending downloads, uses CSRF protection for customer changes and keeps document storage separate from public assets. Deletion tasks use tenant-scoped object keys and deletion fences.
Production requirements, not certification
Production configuration requires private S3-compatible storage, an HTTPS storage endpoint, PostgreSQL with verify-full TLS, secure session/CSRF cookies and an explicit host allowlist. Configuration requirements do not establish deployed infrastructure or independent certification. We make no unverified claim about encryption at rest, certifications, residency or backup recovery.
Customer requests
The authenticated deletion form records a review request. It does not automatically erase the account, billing ledger or backups. The operator must review applicable record obligations and complete the existing document-deletion workflow when appropriate.
Business and contact
Abyss Labs Sdn. Bhd. · Business registration number 202601037802. Contact: yiwen@abysslabs.xyz.