Hello there! I'm a founder, and this has brought us a lot of traffic! THANK YOU! We believe that all APIs must be built in a secure and robust fashion. We use

Hello there! I'm a founder, and this has brought us a lot of traffic! THANK YOU! We believe that all APIs must be built in a secure and robust fashion. We use techniques similar other online accounting apps. I don't believe our responsibilities are greater or lesser than theirs, but I do appreciate your feedback. We will certainly spell out our security better! Specifically, here are some details that should ease your concerns. All traffic is SSL encrypted. We receive an A+ on https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/ We require two randomly created tokens (key/secret) for authentication. Both are 22 character Base 62 strings, so the combined key space is greater than 256 bits. We allow for overlapping keys to encourage regular rotation. We use BCrypt for secret hashing to avoid brute force attacks. All data creation operations will not return success until your data is written to two independent datacenters. We stream versioned resource backups into our own S3 bucket, and optionally a bucket owned and controlled by our customers. With Subledger it really is your data!