Trust Center
Security you can throw your weight behind.
Downward force is only trustworthy if the platform behind it is. Here's how we keep every throw secure, available, and accounted for.
Certifications & attestations
Independently audited.
Reliability
The ground has perfect uptime. We aim to match it.
Live component health, 90-day uptime, and incident history live on our System Status page, never edited after the fact. The full commitment is in our Ground Contact Reliability Agreement (PDF).
Data handling
Subprocessors.
We rely on a few vetted subprocessors. Throw telemetry — apex, velocity, dwell, decibels — is encrypted in transit and at rest; ground-contact certificates are cryptographically signed and immutable. We retain the record, not the object.
| Subprocessor | Purpose | Region |
|---|---|---|
| Northwind Cloud | Primary compute & object storage | US · EU · APAC |
| Gravity, Inc. | Downward force provision | Global · since inception |
| Halcyon Freight | Physical certificate delivery | US · EU |
| Cendrix | Audit-ledger notarization | US |
| Veraline | Email & status notifications | US · EU |
Gravity has partnered with us since inception and never missed an SLA. A full, versioned subprocessor list is available under NDA.
Vulnerability disclosure
Found a way to yeet the unyeetable?
/.well-known/security.txt.Our most important control prevents the wrong throw. See the Do-Not-Yeet registry for the enforced asset classes and how the policy engine blocks a violation before it leaves the hand.