Encryption everywhere
All traffic is served over HTTPS with TLS, and sensitive data is encrypted at rest. Roblox security cookies stored by communities are additionally encrypted with AES-256-GCM before they ever touch our database.
Compliance & Certificates
Sinkly runs on independently audited, certified infrastructure. The certifications and standards below underpin the platform — so you can demonstrate to your community, staff and partners that the tools you use are safe.
Certifications
Audited by independent third parties so you don't have to take our word for it. Select a seal to view the certificate.
Security practices
The controls that sit behind the badges above.
Strong authentication
Email verification, two-factor authentication with authenticator apps, and per-user OAuth with scoped, revocable access for third-party apps built on Sinkly.
Managed infrastructure
Sinkly runs on audited, certified cloud infrastructure with row-level security on every table, role-based access control, and automatic deletion cascades when an account or community is removed.
Verifiable on request
Need an attestation letter or a copy of an underlying certificate for your own compliance review? Contact us and we'll provide the documentation held for our infrastructure.
Need documentation for your own review?
If your organisation requires an attestation letter or a copy of an underlying certificate, contact us at legal@sinkly.cc and we'll provide what we hold for our infrastructure.