Security and trust at HTT
We build HTT with security as the number-one priority. This page describes what HTT actually does to protect your data — with no claims to certifications we don't yet hold.
Data security
Passwords are hashed with argon2id — we never store them in readable form. Sessions store only a hash of the token, never the raw token.
Every connection uses HTTPS/TLS. Data moving between your browser and HTT is always encrypted in transit.
Per-organization isolation
Each organization's data is isolated. Every query is scoped to the organization, so one company's data can never bleed into another's.
Role-based access: managers, members and designers each get exactly the permissions their job needs — no more.
Privacy
We do not sell your data. It is used only to provide the email-signature service you asked for.
You control your signatures and employee directory, and can request changes or deletion at any time.
Compliance posture
We build toward standards such as SOC 2 and ISO 27001, and will only claim them once genuinely certified — never prematurely.
Our data-handling follows a data-minimization mindset: we collect only what the service needs to work.