Data encryption
All traffic between your device and our servers is encrypted via TLS 1.2+. Sensitive data at rest is encrypted with AES-256.
Security note.
A concise view of how we protect your data and our infrastructure.
Last updated: January 18, 2026
Secure infrastructure
Hosted on world-class cloud providers (Vercel, Render, Supabase), SOC 2 and ISO 27001 certified.
Authentication
We use Clerk for modern, secure authentication. We never store your passwords. Clerk provides brute-force protection and supports multi-factor authentication.
Payment security
We never store card details. Transactions are handled by our payment partners (Polar.sh, Stripe), who comply with the strictest PCI-DSS standards.
Where your data lives
Your account data and uploaded files are stored in the EU (Ireland), in our Supabase database and storage.
Image and video generation is processed by third-party model providers, which may be located outside the EU. Your uploads are never used to train models, and nothing you create is published unless you share it.
Vulnerability reporting
If you discover a security issue on arkia.app, please report it responsibly at security@arkia.app. We take every report seriously and will acknowledge receipt within 72 hours.