Trust & Security

We care deeply about security and privacy at [untitled]

We are committed to building the most secure platform for your work-in-progress music to give you the peace of mind you need to do your best work.

This page below will serve as an up-to-date source to keep up with our security practices:

[1] Passwordless sign-in

By offering both Sign in with Apple and a passwordless SMS login system (with option for two-step verification), we effectively eliminate common password-related risks, such as weak passwords, password reuse, and phishing attacks. You will no longer need to remember or store complex passwords, reducing the likelihood of falling victim to cyber threats.

[2] Encryption for all your data

Our platform employs cutting-edge encryption technology to safeguard your data:

  • In-Transit Encryption: We use Transport Layer Security (TLS) to ensure the secure transmission of your data over the internet.
  • At-Rest Encryption: Advanced Encryption Standard (AES-256) is employed to protect your stored data on our servers.

These encryption standards are on par with industry leaders like Dropbox and SoundCloud.

[3] Face ID on iOS

Make sure no one can access your music on your iPhone (even when your phone is unlocked) by requiring Face ID to enter your [untitled] app. We know that an artist’s work-in-progress music can be as precious as their bank account, and we intend to uphold ourselves to the same standards as modern banking apps to secure your music.

[4] World class security expertise

We have teamed up with Latacora, a renowned cybersecurity firm, to build the most secure platform for your music:

  • Expertise and Advisory: Latacora's guidance helps us implement best-in-class security measures and maintain industry-leading privacy standards.
  • Regular Penetration Testing: Cobalt will conduct ongoing and comprehensive penetration testing that will keep our platform resilient against various attack vectors, ensuring your music stays safe.

[5] Robust Access Control

Your uploaded content is private by default, ensuring that only you have access to your music. Securely import and export your files while maintaining full control over your data.

[6] Security Monitoring and Incident Response

We continuously monitor our platform for suspicious activity and utilize advanced tools to detect and prevent potential threats. In the rare event of a security breach, our team will take swift action to contain and remediate the issue.

Stay tuned for our upcoming security features

  • Advanced multi-factor authentication (e.g. authenticator apps, Yubikeys)
  • End-to-end encryption
  • Audio watermarking

If you have any security suggestions or issues, please email us at [email protected]