Good call - We will get some documentation added asap. We are all security experts and user data has been a huge focus for us since day one. We currently spin up a private collection server per user and use SSL certs tied to each box for secure communications. During the beta process before we open to the public we plan to go through a couple rounds of redteam engagements. (i.e let people hack on it to attempt to gain illegal access)
Reselling ATM (we put this together fairly quickly). We designed our backend architecture to be fairly agnostic though in case we want to switch providers or deploy it in house.
