Security

LoreGraph is a brand and online service operated by Kayaan Labs LLC, a Washington limited liability company.

This summary is provided for transparency and does not replace any commitments in your Terms of Service, Privacy Policy, or a separate written agreement.

1. Security Overview

• LoreGraph applies layered administrative, technical, and organizational safeguards designed to protect customer data.

• Our controls are designed to support pilot and production use while we continue maturing our security program.

• Security and privacy controls are reviewed and updated as the platform evolves.

2. Data Protection Controls

• Data in transit is protected using HTTPS/TLS encryption.

• Data is stored in managed cloud infrastructure with platform-level security controls and access restrictions.

• Access to production systems is limited to authorized personnel with role-based permissions.

• We apply application-level controls such as authentication checks, session protections, and security headers.

3. Account and Access Security

• Users authenticate through secure identity workflows, and account actions require authorization checks.

• We provide account-level controls such as password reset, account deletion, and data export capabilities.

• Suspicious activity, abuse, and policy violations may result in account restriction or suspension.

4. Monitoring and Incident Response

• We monitor platform health, reliability, and operational security signals.

• When security incidents are identified, we investigate, contain, remediate, and document corrective actions.

• If an incident materially affects customer data, we will notify affected customers as required by applicable law and contract.

5. Shared Responsibility

• Customers are responsible for safeguarding account credentials, configuring user access appropriately, and uploading only authorized content.

• Customers should avoid storing highly sensitive data unless explicitly approved in a separate written agreement.

• If you need additional controls for enterprise or regulated use cases, please contact us before onboarding.