Overview

This page describes how Minteller protects your data. It is written to be accurate rather than reassuring: every statement here has been checked against the running service, and where something is not in place we say so. It is not a certification, and Minteller does not currently hold any security accreditation. If you are assessing Minteller for a contract, the section Working with Minteller on sensitive work sets out what we can and cannot evidence.

Where Minteller runs

Minteller runs on Amazon Web Services in its Ireland region. The application, the database, file storage and email delivery all live there. Nothing is hosted in the United Kingdom at present, and nothing is hosted in the United States except where a named provider processes data for a specific purpose, listed under Who we share data with.

Encryption

Everything between your browser and Minteller travels over an encrypted connection, and browsers are told never to connect any other way. Video calls use the encrypted connections built into WebRTC between your browser and Twilio.

The database and all stored files are encrypted at rest on Amazon Web Services. This is encryption on the server: Minteller holds the keys through Amazon and can read the files in order to show them to you, scan them and deliver them. It is not end-to-end encryption, and we do not describe it as such.

Signing in and sessions

Passwords are never stored in a form we can read. Ten failed attempts lock an account for fifteen minutes. Sessions ride in cookies that scripts cannot read, and every request checks that the session is still live, so signing out of a device takes effect immediately. You can see every device you are signed in on, and sign out of any of them or all of them, under Security in the app. Two-step verification with an authenticator app is available to everyone and we encourage it. Passkeys are not yet supported.

Who can see what

Every workspace file is checked on every request: who is asking, whether they are in the workspace, and whether the file has been shared with them. A link to a file is short-lived and issued only after that check. Someone who cannot see a file is told it does not exist, not that they are not allowed. Changing who can see a file, every upload, every download link, every deletion, and every action by a Minteller administrator is written to an audit trail that cannot be edited.

Malware scanning

Every workspace file and message attachment is scanned for known malware after upload by AWS GuardDuty. A file that is still being scanned cannot be opened yet; a file in which a threat is found cannot be opened, downloaded or shared, and is shown as such until it is deleted. Site scans and profile photos are not scanned. A scan finds known threats; it is not a guarantee that a file is safe, and we do not describe scanned files as safe.

Payment security

Card details never reach Minteller. Payments and card storage are handled entirely by Stripe on Stripe's own pages.

Backups

The database is backed up automatically by Amazon Web Services. The current backup retention is short, and we are reviewing it before the end of the pilot. We do not currently make a promise about recovery times.

Incident handling

If we become aware of a security incident affecting your data we will tell you without undue delay and, where the law requires it, tell the Information Commissioner's Office within 72 hours. If you find a vulnerability, please report it to security@minteller.com rather than disclosing it publicly, and we will work with you.

Working with Minteller on sensitive work

Minteller does not currently hold Cyber Essentials, ISO 27001, SOC 2 or any defence accreditation. Amazon Web Services, Stripe and Twilio each hold their own certifications, which cover their services and not Minteller. If your work is subject to the MOD Cyber Security Model or similar requirements, the controls described on this page are what we can evidence today; please contact us before placing sensitive material in a workspace so we can confirm whether they meet your obligations.

Keeping this page honest

Every claim on this page traces to a maintained record of what has been verified and when. When a control changes, this page changes with it.