Security

How the platform is run

OffYourBench runs in AWS Sydney behind a web application firewall. Data is encrypted in transit and at rest, every staff account uses two-step verification, each workshop's data is isolated, and daily backups are kept.

Reporting a vulnerability

If you believe you have found a security issue, email security@offyourbench.com.au with enough detail to reproduce it. We acknowledge reports within two business days and will not take action against good-faith research that stays within the account you own and does not touch other workshops' data.

The machine-readable version of this policy is at /.well-known/security.txt.