Trust & Security
We care deeply about security and privacy at tapedeck. We are committed to building the protections your work-in-progress music deserves, so you have the peace of mind you need to do your best work. This page is kept up to date with our current security practices.
Passwordless sign-in
We offer Sign in with Apple and passwordless, one-time-code login instead of traditional passwords. This removes risks from storing tapedeck passwords and reduces exposure to weak or reused passwords. One-time codes and third-party sign-in still require you to guard against phishing and account compromise.
Encryption for your data
All traffic to and from tapedeck is encrypted in transit with Transport Layer Security (TLS). Before storage, uploaded audio is encrypted with AES-256-GCM using a data key managed by tapedeck, in addition to Cloudflare R2's AES-256 encryption at rest. Account and project data stored in PlanetScale is also encrypted at rest and in transit. tapedeck holds the keys needed for authorized playback and processing, so this is not end-to-end encryption.
Private by default
Everything you upload is private by default and only you can access it. When you share, you choose exactly who gets in and what they can do through a strict owner > editor > viewer role hierarchy. You can revoke access at any time, and short-lived signed URLs mean shared audio never sits openly on the internet.
Biometric lock on mobile
On iOS, you can require Face ID to open the tapedeck app, so no one can reach your music even when your phone is unlocked. We treat work-in-progress music with the same care a modern banking app applies to your finances.
Our vendors
We rely on a small set of trusted providers to operate and improve tapedeck:
- Cloudflare for hosting, networking, and private media storage
- PlanetScale for our PostgreSQL database
- Resend for transactional emails
- Axiom for operational logs and security monitoring
- PostHog for product analytics and error monitoring
- Databuddy for privacy-focused analytics on our public website
Security monitoring & incident response
We continuously monitor our platform for suspicious activity and use structured logging and alerting to catch potential threats early. In the rare event of a security incident, our team takes swift action to contain, remediate, and communicate the issue transparently.
Reporting a vulnerability
If you have security suggestions or believe you have found a vulnerability, please email us at security@bejanic.de.