Security & privacy
Protecting your organisation and the people who answer
Security and privacy in bebon aren't settings — they're how the product is built. Here's what that means in practice.
Security & privacy
Sign-in and sessions
- Two-step sign-in: your password, then a 6-digit code sent to your email
- Passwords are stored as Argon2id hashes, never in plain text
- Repeated failures lock the account, and every sign-in step is rate-limited
- Sessions use short-lived access tokens and refresh cookies that rotate on every use; a replayed cookie ends the whole session
- Deactivating a teammate signs them out everywhere, immediately
Your data stays yours
- Every organisation's data is isolated: each query is scoped to your organisation, taken from your session — never from the address
- Our own console has no access to your people data in any form
- Our team signs in to that console with an authenticator app — mandatory, with no bypass
Respondent privacy
- Confidential surveys hide every group smaller than your minimum group size
- Anonymous surveys never link a response to a person, and store response times to the day
- Survey keys travel after the # and in a request header — never in an address — and our logs redact survey links
- The language someone answers in is never recorded
- Personal details such as names and emails never appear in a page address
Access and accountability
- Page-level roles with separate read and write access
- An activity log of every change, with each person's own activity visible to them
- Support works on your surveys only inside a window you open, for 1, 4, 24 or 72 hours — and every action is logged
Hardened by default
- Rate limits on every endpoint
- Uploaded images are checked by their content, not their name; SVG files are refused
- No third-party trackers on this website
What we don't claim
We don't display certification badges we don't hold. If your organisation needs a security questionnaire answered or has questions about where data is hosted, talk to us and we'll give you straight answers.
Report a security issue
Found something that doesn't look right? Email us and we'll respond promptly.
Find out what your people really think
Start a 7-day free trial with every survey type, or talk to us about rolling bebon out across your organisation.