Security and data protection
How Taskmei isolates organisations, controls access and keeps a clear record of change, so teams can work quickly without losing control.
How Taskmei protects your data
Isolated organisations
Every organisation's projects, people and data are scoped to that organisation on the server. Requests, including search, only ever return data from the signed-in user's own organisation.
Role-based access
Eight organisation roles control which pages and actions are available, and checks run on the server for every request, not only in the interface.
Project membership
People see only the projects they have been added to. Removing someone from a project revokes their access straight away and clears them as assignee on that project's work.
Encrypted AI keys
AI provider keys are encrypted with AES-256-GCM before they are stored. After saving, only a masked version is ever shown, and keys are never sent back to the browser.
Email verification and abuse protection
Self-registered accounts must verify their email before signing in. Sign-up is protected against automated abuse, and disposable email domains are blocked.
Sessions
Signed session tokens expire after eight hours and are stored in HTTP-only cookies that page scripts cannot read.
Audit trail
Each work item keeps a field-level change history, the organisation has an activity log, and platform administration actions are recorded with before-and-after values.
Your data, exportable
Download CSV status reports for sprints and projects and the documents attached to closed sprints whenever you need them.
Frequently asked questions
Who can see my organisation's data?
Only members of your organisation, and within it only the projects each person has been added to. Every request is checked on the server against the signed-in user's organisation, role and project membership.
Are AI provider keys safe to add?
Keys are encrypted with AES-256-GCM before storage, are never returned to the browser after saving, and only a masked version is displayed to admins.
Can we get our data out?
Yes. Sprint and project status reports can be downloaded as CSV, and documents attached at sprint closure can be downloaded at any time.
How do I report a security concern?
Use the Feedback button inside the app and describe the issue; feedback goes directly to the Taskmei team.
Related resources
Run your next sprint in Taskmei
Free plan for small teams. Scrum, Kanban and Hybrid boards, AI-drafted backlogs and live delivery dashboards.