Draft, pending legal reviewv0.1 · Updated October 10, 2026
Security
How Frame protects your account and data, and how to report a vulnerability.
In short
- Passkeys and 2FA supported on every plan.
- Encryption in transit and at rest.
- Ownership verification before any scan.
- Report vulnerabilities to security@frameprivacy.com.
01Account security
Passkeys, TOTP two-factor, active session management and login history. Sensitive actions (export, deletion, adding identifiers) ask you to re-authenticate.
02Data protection
TLS 1.3 everywhere, AES-256 at rest, per-tenant encryption keys for scan results (planned), secrets in a managed vault, and least-privilege production access.
03Ownership verification
Frame only scans identifiers you prove you own, so it can’t be used to look up other people.
04Responsible disclosure
Email security@frameprivacy.com with details and steps to reproduce. We acknowledge within 2 business days, won’t pursue good-faith research, and credit researchers who want it.
Questions? privacy@frameprivacy.com