Securitywithout claims you cannot check.

No seals and no certificates here. There is how the login works, who sees what and what stays in the log — all of it verifiable inside the panel itself.

How the login worksand what you can do with it.

The panel has no password at all, so there is nothing to forget and nothing to steal: access is always tied to a Discord account.
Login through DiscordPress Log in, confirm the access and you are in the panel. There is no separate password, so there is nothing to guess.
Short-lived tokensThe session renews itself, but every token lives briefly, and requests are protected against forgery from another site.
A list of devicesThe Sessions section shows the browser, the system and the last activity of every login. Extra ones are ended with a single button.
Limits and blocksGuessing a code or trying to bypass permissions runs into limits, and the protection that fired shows the reason on the block screen.

Who sees whatinside an organisation.

  1. Permissions in three layers

    Full access for the owner and superusers, section visibility by position, and action permissions from a separate matrix.

  2. Data stays on its server

    A member sees their own server only: the restriction sits in the backend, not in the interface. Interview recordings are available to your server alone.

  3. The profile is closed by its owner

    Age, Discord ID, social links, coins and status are hidden in the profile settings, and hidden fields are marked so they do not look broken.

  4. The channel to the bot is signed

    The site talks to the bot over a signed channel with a key, a timestamp and a nonce, so someone else's request cannot pose as ours.

Common questionsabout data.

What data do you store?

What the community and the member enter: nickname and positions, age and social links from the profile, the action log, reports, penalties and coins, the Discord ID and the avatar. Details are in the privacy policy.

What is sent to the language model?

Only counters and a nickname. Conversations and personal data are not passed on, and the numbers under a review are rechecked in the log and the profile.

Can a server and its data be deleted?

Yes. The settings Overview has a collapsed Danger zone: freezing, transfer to another owner and deletion.

Do you hold certificates such as ISO 27001?

No, and we do not claim any: such certification is issued by an accredited body after auditing an organisation. Instead of a seal we show what can be checked — an append-only log, separated permissions, a signed channel to the bot and strict security headers on every response.