Security

Security Measures

Traffic to the Mariontek application and API is served over HTTPS/TLS, encrypting data in transit. Application data is stored on managed infrastructure that encrypts data at rest.

Access to production data is restricted to authorized personnel, and the application enforces row-level security so that each account can reach only its own data. Account passwords are hashed and never stored in plaintext. Payment details are handled by our payment processor; MARIONTEK LLC does not store raw card numbers.

Raw call audio is not retained by default — the service stores structured notes and summaries. Customer data is stored in the United States and, following account termination, is deleted or anonymized as described in the Privacy Policy and Data Processing Addendum.

Mariontek relies on vetted subprocessors, listed in the Privacy Policy and Data Processing Addendum, each of which maintains its own security program. Mariontek does not currently hold a SOC 2 or ISO 27001 attestation.

Reporting a Vulnerability

If you believe you have discovered a security vulnerability in Mariontek's systems, please report it to us promptly. We take security issues seriously and will investigate and respond to credible reports.

Contact: security@mariontek.com

Please include a description of the issue, the affected component or URL, steps to reproduce, and your assessment of potential impact. We ask that you not publicly disclose the issue until we have had a reasonable opportunity to investigate and address it.

What to Expect

We will acknowledge your report within a reasonable time, keep you informed of our progress, and let you know when the issue has been resolved. We will not take legal action against researchers acting in good faith under this policy.

Scope

This policy applies to the Mariontek web application and API. It does not cover third-party services and infrastructure providers, which have their own security programs.