Designless
Security
How we protect access, and how to report a concern.
Protected access
LESS Studio requires sign-in for account work. Protected APIs check credentials and access to the relevant account or team. Keep private API keys in trusted environments. Public Brand Capsule delivery is intended to be public.
Data and shared work
Connections to our sites and APIs use HTTPS. Public links make the work at those links available to other people; review what you share before publishing. Our Privacy Policy explains collection, retention and your rights. Our data-processing agreement and sub-processors list give further information.
Security measures
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments and penetration testing
- Access controls and role-based permissions for our team
- Secure development practices and code review processes
- Incident response procedures and breach notification protocols
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Report a concern
Contact support with the affected page or feature, what happened, and how we can reproduce it. Do not send passwords, private keys or other people's personal data.