Cosmatae / Basework
Security
How we approach account, project, and platform security.
Last updated: August 20, 2026
Our approach
Security is built into the way we operate the platform. We use managed infrastructure and access controls to help protect accounts, project data, and service operations.
We limit access to production systems and customer data to people and providers who need it to operate and support the services.
Your account and workspace
Keep your password private and use a unique, strong password for your account. Workspace owners should regularly review membership and remove people who no longer need access.
Only invite people you trust to project workspaces and shared review links.
Reporting a vulnerability
If you believe you have found a security issue, please email info@cosmatae.com with a clear description and enough detail for us to reproduce it. Please do not publicly disclose the issue while we investigate.
Service incidents
For confirmed widespread incidents, we will work to assess impact, restore service, and communicate material updates to affected account holders.