SECURITY

Security

Your model is encrypted before it leaves your browser.

Threat Strata encrypts with AES-256-GCM. The 256-bit key is generated in your browser and placed in the link fragment — the part after #. Browsers never send fragments to a server, so the key never reaches us.

What the server can see

Ciphertext, its size, timestamps, and the account that owns it. Not the model, not the component names, not the threats.

Workspace key

Your password is stretched with PBKDF2-SHA256 (600,000 iterations) into a key that unwraps your workspace. The password itself is never sent; the server only sees a separate authentication key derived from it.

Share links

A link contains the decryption key. Anyone who has the whole link can read the model. Treat a share link like the document itself — do not paste it somewhere you would not paste the model.

What we cannot protect against

• A compromised browser or device.
• Someone you gave the link to.
• Screenshots.
• A password you reused elsewhere and lost.

Limits

A model may be up to 1 MiB. A workspace may be up to 2 MiB. These are enforced server-side.

No recovery

There is no password reset. See the warning on the registration page.