Security at OneHaus

All data is encrypted in transit using TLS. Data stored on our servers is encrypted at rest using industry-standard encryption.

Your data is never used to train AI models. AI conversations are stored securely within your household and automatically deleted after 72 hours. Conversations exist only for support and debugging purposes during that window.

For full details on how AI data is handled, see the AI chat data section of our privacy policy.

Authentication is verified on every request using industry-standard tokens. Permissions within a household are role-based, with owners and members having different levels of access.

Household data is isolated. You can only access households you belong to.

All user input is validated and sanitized before processing. This helps protect against common attack vectors and ensures data integrity across the platform.

OneHaus is hosted on certified cloud infrastructure. Activity is logged and monitored to detect anomalies. All infrastructure is managed through code with version control, ensuring consistency and auditability.

If you discover a security vulnerability, please let us know responsibly. Contact us at support@onehaus.app. You can also find our disclosure details at /.well-known/security.txt.

Our data handling practices are aligned with GDPR and CCPA requirements. For full details, see our privacy policy.