Your business data, kept safe.
How Gauci protects your accounts, keys and data today, and what we are working towards.
In place today
Encryption in transit Live
Every page and API call uses HTTPS.
Encrypted network keys Live
Social network tokens, app passwords and keys are encrypted with AES-256-GCM and never shown again after you save them.
Two-step verification Live
Protect your sign-in with a one-time code from an authenticator app.
Data stored in India Live
Gauci runs on servers in the Asia Pacific (Mumbai) region.
No outside scripts Live
A strict content security policy blocks trackers, ad code and outside scripts on every page.
Separate Gauci data Live
Gauci has its own database, files and sign-in secret, separate from every other product.
Working towards
Passkeys Planned
Sign in without a password.
Per-workspace encryption keys Planned
Envelope encryption with keys per workspace in a key management service.
Two-step for admins Planned
Compulsory for owners, admins and billing roles.
SSO and SCIM Planned
For Business and Enterprise plans.
Independent testing Planned
Annual penetration test; ISO/IEC 27001 and SOC 2 Type II targets within 18 months of launch.
Status page Planned
Live status and incident history at status.gauci.in.
Report a vulnerability
Email security@gauci.in with the steps to reproduce. Test only against your own account, do not access other people's data, and give us time to fix before you publish. We will not take legal action against good-faith research that follows these rules, and we reply within 3 working days.