# Security Your security and privacy are our top priorities. Learn how Summer Labs, Inc. protects your game development projects and data in Summer Engine. ## Data Protection Summer Engine implements industry-standard security measures to protect your data in compliance with the GDPR and the other data protection laws that apply: * End-to-end encryption for data in transit using TLS 1.3 * AES-256 encryption for data at rest * Regular security audits and penetration testing * Multi-factor authentication support * Secure API endpoints with rate limiting and authentication * Privacy Mode for paid plans (zero data retention with our model providers) ## Privacy Mode **When enabled, we guarantee that code data is never stored by our model providers or used for training.** Privacy Mode is included on all paid plans. Privacy Mode is not available on the Free plan. When Privacy Mode is not enabled, prompts and code snippets you send may be retained and used to improve our AI features and train our models, as described in our [Privacy Policy](https://www.summerengine.com/privacy). * Zero data retention with our model providers * No training-data use for content sent from your account * Transparent data handling policies * GDPR Article 25 alignment (Privacy by Design) ## Infrastructure Security Our platform is built on secure, enterprise-grade infrastructure hosted in EU data centers: * EU-based cloud infrastructure with 99.9% uptime SLA * Automated security monitoring and alerting * Regular security patches and updates * Isolated environments for different user tiers * Distributed denial-of-service (DDoS) protection * Data residency controls for GDPR compliance ## Compliance & Certifications We are committed to meeting the highest security and compliance standards: * GDPR compliance * Danish Data Protection Act compliance * CCPA compliance for California residents * Regular third-party security assessments * ISO 27001 alignment (planned) ## Incident Response We maintain a comprehensive incident response plan to quickly address any security concerns in accordance with GDPR breach notification requirements: * 24/7 security monitoring and response team * 72-hour breach notification to the competent data protection authority (when required) * Immediate user notification procedures for security incidents * Regular backup and disaster recovery testing * Transparent communication about security issues ## Best Practices for Users Help us keep your account secure by following these recommendations: * Use strong, unique passwords for your Summer Engine account * Enable two-factor authentication when available * Keep your development environment updated * Regularly review your account activity * Report any suspicious activity immediately * Enable Privacy Mode (paid plans) for sensitive projects ## Reporting Security Issues If you discover a security vulnerability, please report it to us immediately at: support@summerengine.com (subject line: Security report) We take all security reports seriously and will respond within 24 hours. Our [Vulnerability Disclosure Policy](https://www.summerengine.com/legal/security) explains the rules and the safe harbor for security researchers. ## Contact Us For any security-related questions or concerns, please contact: **Email:** support@summerengine.com **Summer Labs, Inc.** 2810 N Church St, STE 89812, Wilmington, DE 19802, United States Source: https://www.summerengine.com/de/security --- ## Machine-readable resources - Site index for agents: https://www.summerengine.com/llms.txt - Full inlined content: https://www.summerengine.com/llms-full.txt - Porting catalog: https://www.summerengine.com/llms-porting.txt - Structured catalog: https://www.summerengine.com/agent-catalog.json - Sitemap: https://www.summerengine.com/sitemap.xml - Developer resources: https://www.summerengine.com/docs