Skip to content

Loading 1HERO

Security and data

Every app passes the check before it goes live. And the fix is free.

The pre-publish check

A check you can't skip, explained in plain words.

If something puts the data of the people who'll use your app at risk, the app doesn't go live. Hero explains the problem, fixes it with you right away, at no cost to you.

Check progress

Security

  • Only the right people see the right data

  • No private page is left open by mistake

  • The keys to connected services stay safe

Does it work

  • The main pages open without errors

  • What you asked for really works, tested

If a functional test fails, you decide whether to fix it first or publish anyway. Security is different: the app waits for the fix.

Check passed

You

You're the controller of the data of the people using your app: you decide why you collect it and how it's used. 1HERO gives you the tools to meet that responsibility, starting with the consent form and the privacy notice.

Sicilean s.r.l., on your behalf

Processes that data on your behalf, as a processor, under a written contract. It doesn't decide what the data is for.

The providers

The services everything runs on. They work on behalf of Sicilean s.r.l., under the same obligations, and each one is listed on the transparency page.

Where the data is kept

In the European Union, with every exception declared.

Your data and the data of the people using your app are processed and stored in the European Union.

Some providers are US companies: this means some remaining exposure. In cases set out in US law, a US authority can ask those providers for access to data, even when it's stored in Europe.

Every provider, with its registered office and where it processes data, is on the transparency page.

Read the transparency page

What you can do

Three things you can do at any time.

  • Download every project you've built

    The code, your data in a format other software can read, uploaded files and texts. A developer can pick it up from there without 1HERO.

  • Delete your account

    Deleting your account deletes your projects and the data your apps collected, within the time set out in the privacy notice. You can download everything first.

  • Count on a daily backup

    Every app is backed up once a day, and restoring is tested regularly.

What we don't say, on purpose.

  • We don't say your data is safe from any outside access. We explain the real exposure.

  • We don't say you're compliant with data protection law. We give you the tools to be, and tell you what's up to you.

  • We don't say your app has an accessibility certification. We build it so anyone can use it, and certification is a different thing.

  • If Hero can't answer with certainty about data or security, it says so, and points you to the written, checked wording.

Reporting

Report a security issue. We'll reply, and thank you.

If you find a vulnerability on the site or in 1HERO, write to sicurezza@1hero.ai. We'll reply within 3 working days, tell you what we're doing and let you know when it's fixed.

How to report

  1. Describe the problem and how to reproduce it.
  2. Don't access or change other people's data.
  3. Don't make the problem public until it's fixed.

We take no action against anyone who reports in good faith and follows these rules.

Write to sicurezza@1hero.ai

The same contact is in the site's security.txt file.

You'll see the check at work. In early access, from October.