Security is foundational to TIME Sites. Here's an overview of our security practices.
Need to report a security vulnerability?
Please read our overview of responsible disclosure. To report a vulnerability, please email infosec@time.com.
Security Overview
TIME Sites runs on Amazon Web Services, using multiple availability zones and firewall protection.
The TIME Sites Studio is served exclusively over SSL. All data is encrypted in transit.
We take regular backups of our database systems, and store your data across multiple AWS availability zones.
For paid customers, we offer automatic SSL protection for custom domains.
TIME Sites employees do not have access to user data unless required for support reasons.
We use Stripe to handle payments. We never store your credit card information on our servers.
Passwords and other sensitive information are filtered from our logs. All passwords are one-way encrypted using an industry-standard hashing algorithm.