Security

How we protect your data and your recipients' experience.

lock

Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Files uploaded to slim.to are stored in encrypted cloud storage with access controlled by your sharing settings.

shield_person

Access Controls

You control who can view your shared files. slim.to supports password-protected links, email-gated access, link expiration, and download limits so your content is only seen by the right people.

cloud_done

Infrastructure

Our infrastructure runs on industry-leading cloud providers with built-in redundancy, automated backups, and 24/7 monitoring. We maintain strict network segmentation and follow the principle of least privilege for all internal access.

passkey

Authentication

User accounts are protected with securely hashed passwords and session management with automatic expiration. Team plans support SSO integration for centralized identity management.

database

Data Handling

We collect only the data necessary to operate the service and provide analytics. Engagement data (views, location, device info) is collected for link owners and is never sold to third parties. You can delete your account and all associated data at any time.

bug_report

Vulnerability Reporting

If you discover a security vulnerability, please report it responsibly to security@slim.to. We take all reports seriously and will respond promptly.