Security
On the record.
Where your data lives, how it is protected, and who touches it. The answers a careful buyer should get in writing, so here they are in writing.
Where your data lives
AWS eu-central-1 · Frankfurt · region pinned
Everything runs in the European Union. The database, file storage, cache, and outgoing mail all stay in-region, and the region is pinned in the infrastructure code itself. Nothing is replicated outside the EU.
Encryption
TLS in transit · encrypted at rest
Every connection to fam. travels over TLS. The database, the cache, and every backup are encrypted where they sleep.
Backups
Daily · kept 7 days · deletion protected
Automated daily backups, encrypted like everything else. The production database cannot be dropped by a console mistake, ours included.
Status
Live status page · public incident history
Every incident and maintenance window is posted in the open at fam.instatus.com. Subscribe there to hear about any disruption the moment it happens, and when it is resolved.
Signing in
12+ chars · breach-checked · 2FA app, email, SMS
Passwords follow NIST 800-63B: length over silly composition rules, checked against known-breach lists, stored hashed. Two-factor can be enforced for every seat in a company.
Your data stays yours
CSV export · anonymization on request
Export what belongs to you, self-serve, from inside the app. If you leave, your data leaves with you.
Who else touches your data
- Amazon Web ServicesInfrastructure, storage, mailEU · Frankfurt
- StripePayments and billingCard data stays with Stripe
- AnthropicAI assistant queriesOnly what you ask it
- SentryError monitoringTechnical traces, not your content
That is the whole list.
What we do not do
No pixels · no ads · no resale
There is not a single third-party analytics script or advertising pixel on this site or in the product. Your data is not a revenue stream; it is the thing we keep in order.
Doing vendor diligence?
Send your security questionnaire. It gets answered by the people who build the product, in days, not quarters.
Send it in writing
fam. Technologies · KVK 77432525 · Utrecht, NL · Privacy · Terms · Cookies · DPA on request
Found a vulnerability? Write to us before you write about it anywhere else. Reviewed · July 2026
