Last updated June 13, 2026
Security
Security is built into how Platform Direct (operated by Cryptool.io) handles your data and your store. Here is an overview of the measures we take.
Data in transit and at rest
All traffic to our site and portal is encrypted with TLS. Credentials you store in the portal are encrypted at rest using AES-256-GCM, and account passwords are stored only as salted scrypt hashes. We never store secrets or passwords in plain text.
Access control
Access to client data and credentials is limited to the team members who need it. Where a project requires a token, it is scoped to the minimum permissions for that single repository or service. We prefer delegated access, where you invite our account, over sharing a secret.
Sessions
Signed-in sessions use HttpOnly, secure, same-site cookies and expire automatically. Disabling an account immediately ends its active sessions.
Infrastructure
We host on reputable cloud infrastructure with managed databases, regular backups, security patching, and monitoring. Our public website is served over a hardened reverse proxy with automatic certificate renewal.
Responsible disclosure
If you believe you have found a security issue, please email info@platform-direct.com with the details. We appreciate responsible disclosure and will work with you to verify and resolve the issue promptly.
Questions about this page? Email info@platform-direct.com.