HyperBabelHyperBabel
Back to Home
Enterprise-grade security infrastructure

Security is built in, not bolted on

HyperBabel is built with security as a first principle — from API key management to data export and deletion, every layer is hardened by design.

Compliance Status

Data Export APIActive

Machine-readable JSON export of organization data for access and portability requests

TLS 1.3Active

All API endpoints enforce encrypted transport

HMAC-SHA256Active

Webhook signature verification for all delivery events

Multi-region StorageActive

File redundancy across distributed edge nodes

Data Deletion APIActive

Programmatic data erasure for deletion requests

Security Architecture

API Key Security

  • SHA-256 hashed key storage — plaintext keys are never stored
  • Per-key scope control: `chat`, `video`, `translate`, `storage`, `push`
  • Key rotation without downtime via atomic swap
  • All keys displayed only once at creation (one-time reveal)
  • Sandbox API keys are isolated from production environments

Encryption & Transport

  • All API traffic enforced over TLS 1.2 / 1.3
  • JWT access tokens signed with HS256, short-lived (15 min)
  • Webhook payloads signed with HMAC-SHA256 — verify with `X-HyperBabel-Signature-256`
  • At-rest encryption for stored files (CDN object storage)
  • Secrets and credentials stored in environment-isolated vaults

Infrastructure Hardening

  • Deployment on an isolated edge runtime
  • Managed PostgreSQL with connection pooling and TLS in transit
  • Encrypted KV cache layer — no public exposure, AUTH + TLS only
  • Rate limiting enforced per API key per minute (plan-based)
  • Edge-network DDoS protection across all public endpoints

Monitoring & Audit

  • 24/7 infrastructure monitoring with automated alerting
  • Structured JSON logging across all API services
  • Webhook event delivery tracking with retry audit trail
  • Usage metrics per API key for anomaly detection
  • Admin-only elevated endpoints protected by separate secret auth

Compliance & Privacy

  • Sub-processor list published in our Privacy Policy
  • Privacy Policy and Cookie Policy published
  • Data retention and deletion controls available via API

Reliability & SLA

  • 99.9% monthly uptime SLA on Scale, 99.5% on Basic (Free is best-effort)
  • Automatic failover across distributed edge nodes
  • Zero-downtime deployments via rolling release strategy
  • Multi-region storage redundancy for file durability
  • Idempotency keys supported on critical write endpoints

Responsible Disclosure

If you discover a security vulnerability in HyperBabel, please notify our security team before public disclosure. We are committed to working with researchers on responsible disclosure.

security@hyperbabel.com
🔒

Build with confidence

Start building on enterprise-grade security infrastructure — free. No credit card required.

Privacy Policy