Skip to content

Trefeo

Security

Clear protection boundaries help you make informed choices.

The current demo

Destination briefings are available without signing in. The free preparation flow stores composed plans and progress in your browser. Local storage is persistence, not an authenticated private account or a protected cloud vault.

Connection and device

The public site is delivered over HTTPS. This protects the connection in transit; it does not protect against someone using your unlocked device or browser profile. Keep your device and browser updated and use a browser profile you control.

The current local plan storage does not add application-level encryption. Do not use prototype screens to store passwords, recovery credentials, passport scans, or other sensitive documents.

Account protection is being developed

The intended account model uses a generated account ID, a password, and mandatory authenticator verification without requiring an email address or phone number. The login, access controls, and recovery process must be verified before that model is offered as a production service.

Prototype account and organization screens should be demonstrated with synthetic test information. They do not establish production account protection.

Privacy and security information

Our privacy page explains browser storage, hosting, and analytics. This page will be updated as account protections are implemented and verified.