Kept Desk · security
How Kept Desk protects your data
Ministries, institutions and companies put internal dates and unannounced plans into Kept Desk. This page lists what protects that information today, and what is still on the roadmap, so your IT and security team can judge it plainly.
In place today
Infrastructure and encryption
- Runs on Cloudflare's global network. Data is stored in Cloudflare D1, encrypted at rest with AES-256, and every connection uses HTTPS (TLS).
- Workspace pages are never indexed by search engines, cannot be embedded in other sites, and send no referrer to links you open.
Signing in
- Two-step sign-in: a six-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password and others), with single-use recovery codes. It is asked after the password and after an email link, so a stolen mailbox alone is not enough.
- Workspace rule: an admin can require two-step sign-in for everyone, and reset it for a person who has lost their phone.
- Passwords of at least 10 characters, stored only as salted PBKDF2-SHA-256 hashes (100,000 rounds). Repeated wrong passwords lock the account for 15 minutes, and sign-in attempts are rate-limited by network.
- Email sign-in links work once, expire within an hour, and need a click on a confirmation page, so email security scanners cannot use them up.
- Sessions use signed, HttpOnly, Secure cookies. "Sign out everywhere" and any password change end every other session. People are emailed when their password or two-step sign-in changes.
Access inside your workspace
- Three roles: admin, manager and member. Members can be limited to their own commitments.
- Confidential commitments are visible only to the owner, their manager, the person who recorded them and admins.
- When someone leaves, removing them signs them out at once and moves their open commitments to a successor, with the history kept.
- An activity log records sign-in security events, changes, reassignments, exports and settings.
Your data stays yours
- Export every commitment to a spreadsheet at any time.
- Kept Desk data never flows into the public KeptIndex record, scores, alerts or data products. See the independence policy.
- The Draft Check on the Kept Desk page runs entirely in your browser; nothing you paste is sent to us.
- On request, we delete a workspace and its data.
On the roadmap
Listed in the order we expect to deliver them. None of these is available yet.
- Planned: single sign-on (SAML and OpenID Connect) for Enterprise workspaces.
- Planned: an independent penetration test, with a summary available to customers.
- Planned: a standard data processing agreement and a completed security questionnaire for procurement teams.
- Planned: SOC 2 Type II, an audit by an independent firm of how these controls operate over several months.
Report a security issue
Email contact@keptindex.org with "Security" in the subject. We reply within one business day and do not take action against good-faith research.
Last updated 27 October 2026. Back to Kept Desk