Security

Anchor security is layered across identity, access, storage, observability, deployment, and review. Continuity systems are designed so a single surface should not silently rewrite shared reality.

Sensitive records are protected with encryption in transit and at rest, scoped permissions, separation between environments, and operational logging for privileged actions.

Production access is limited, reviewed, and monitored. Changes move through testing, review, and deployment controls before they reach live continuity systems.

We monitor for unusual access patterns, service degradation, abuse, and integrity risks that could affect memory, identity, or consensus records.

Security review is part of product planning, engineering, infrastructure changes, and institutional deployment. High-risk changes require explicit review for privacy, abuse, continuity, and recovery impact.

For enterprise deployments, Anchor can provide security documentation, architecture notes, and audit artifacts under appropriate agreements.

Security concerns should be reported with enough detail to reproduce the issue and understand the potential impact. We prioritize issues that affect account access, private context, shared records, or system integrity.

Anchor does not encourage testing that disrupts service, accesses another participant's data, or modifies production records.