Home / Legal / Trust Center

Trust Center

What we will say in public about isolation and data. No invented certifications.

Isolation

Organizations are separated by email domain. Users on one domain do not see another domain’s decks, rankings, or users.

Sources

Public sources are used to research cards. Optional private sources (sales calls, email, Slack, product documentation, CRM) are connected per tenant and are not a shared corpus across customers.

Hosting

The marketing site is hosted on Cloudflare. The application host is app.gtmflashcards.com.

What we have not published

We have not posted SOC 2, ISO, or pentest PDFs here. When those exist, they will be linked from this page instead of implied.

Report a concern

[email protected] — suspected isolation bugs, abuse, or security issues.