Your data,
protected at every layer.
Your training data is sensitive. Here is exactly how we protect it — no buzzwords, no marketing.
Encryption
Everything you send us travels over TLS 1.2 or later; older protocols are refused. The iOS app also pins the public keys of our certificate authorities.
Your health records, blood-work markers and microbiome profiles are encrypted by BioForge before they reach the database, and so are the access tokens of the services you connect.
The encryption key is kept apart from the database: someone holding the database alone reads only ciphertext.
Infrastructure
The BioForge backend runs on Railway, in the European Union, with PostgreSQL. The web app and this site are served by Vercel's edge network.
Every admin access to your data is logged, and that log is yours to read.
Deployments are automated from the code repository. Configuration lives in code, versioned and reviewed.
BIA security
BioForge uses Claude by Anthropic to power your coach. Anthropic deletes API inputs and outputs within 30 days, except where retention is required by law or for its trust and safety reviews.
Your data is never used to train anyone else's models. Anthropic's commercial terms state that it may not train models on customer content.
Claude processes your data only to produce your analyses, your plan and the coach's answers: when you ask, or when new data calls for it (a session, a report). Your health data reaches it only if you allow AI processing of it.
Authentication
Sessions use HTTP-only, Secure cookies with the SameSite=Lax policy: the access token expires after 48 hours, the refresh token after 30 days.
No password is ever stored in clear text. Auth tokens are cryptographically signed, and signing out or resetting your password revokes them.
Every endpoint that reads your data requires your authentication and checks that the data is yours. Sign-in and costly analyses are rate-limited.
Responsible disclosure
If you find a vulnerability, please email security@bioforge.science. We take every report seriously.
We triage and acknowledge within 72 hours; a critical report gets an emergency mitigation the same business day.
We do not take legal action against researchers who report in good faith.
GDPR
BioForge applies the EU GDPR, including Article 9 for health data.
Health data are processed on your explicit consent, which you can withdraw at any time; account and training data, to provide the service you signed up for.
You can access, rectify, erase, port and restrict your data, and object. We answer within one month.