Security Architecture & Controls
TrimMe sits between your marketing campaigns and your customers. We design our link infrastructure with isolation, encryption, and zero-cookie telemetry at every layer.
Infrastructure & Container Isolation
TrimMe's services run inside dedicated containerized environments using Docker Compose behind an optimized Nginx edge reverse proxy. The redirect engine, application API, analytics worker, PostgreSQL database, and Redis cache communicate via an isolated internal bridge network with no direct public exposure of database ports.
- ✓ Isolated Docker network topology
- ✓ Automated container healthchecks on internal loopbacks
- ✓ Least-privilege process execution inside production containers
Encryption in Transit & Password Hashing
All communications to TrimMe (trimme.co, app.trimme.co, and api.trimme.co) are enforced over HTTPS utilizing TLS 1.3 with modern cipher suites. Automated certificates are managed and renewed with zero manual intervention.
User passwords are encrypted before storage using the industry-standard bcrypt hashing algorithm at cost factor 10. We never store or log plaintext credentials anywhere in our code or telemetry streams.
Session Security & Tenant Data Isolation
Dashboard authentication is governed by cryptographically signed JSON Web Tokens (JWT) using HMAC-SHA256 with 7-day lifespans. Every link, rule, and campaign is explicitly partitioned by tenant user ID in PostgreSQL with foreign-key constraints, ensuring complete data isolation between customer workspaces.
Zero-Cookie Redirects & Salted Visitor Telemetry
Unlike traditional platforms that inject persistent tracking cookies, TrimMe's redirect engine issues zero tracking cookies to visitors.
To compute daily unique visitor counts, incoming IP addresses are salted in-memory and hashed with SHA-256 before being queued into Redis Streams. The raw IP address is never written to disk or stored in database tables. Hashes expire automatically after 24 hours.
Vulnerability Reporting & Incident Response
We welcome responsible security research. If you discover a vulnerability or security flaw in any TrimMe property or service, please notify our team directly:
Please allow our engineering team a reasonable window to remediate any confirmed security findings prior to public disclosure.