Infrastructure
Hubcove runs on infrastructure hosted in the EU. Application, sync and calling services are separated into their own network segments, so a problem in one can't cascade into the others. All services sit behind a hardened edge proxy — nothing talks to storage or the database directly from the public internet.
Data handling
We only store what's needed to run the product: your files, workspace metadata, and account details. We don't scan file contents for advertising, and we don't sell data to third parties — see the Privacy Policy for the full picture.
Backups are encrypted and retained on a rolling window. Deleted files are purged from backups within 30 days of deletion.
Account protection
- Two-factor authentication (TOTP) available on every plan, including Free.
- Session and device management — revoke access from any device in one click.
- Audit log of sign-ins and admin actions on Business plans.
- SSO (SAML) for Business workspaces.
Responsible disclosure
Found a security issue? We want to know before anyone else does. Email security@hubcove.online with details and reproduction steps. We aim to acknowledge reports within 2 business days and don't pursue legal action against good-faith researchers who follow this process.