Current boundaries
This release serves public static assets over HTTPS. Core tools do not upload financial data, and no account database or public administration endpoint is active. Optional plan backups are processed locally, capped in size and checked against the supported format; they are not uploaded.
Protect your own records
Device storage and exports are not encrypted. Avoid saving on a shared or untrusted device. Do not enter government passwords, bank credentials or identity numbers. Follow external links through their actual official destinations.
Reporting
Send a minimal description of a suspected security issue to contact@elaris.au; use fictional data and do not send secrets. A formal independent penetration test has not been completed. Future account or AI services require server-side authorisation, secure secrets, rate limits and privacy review before activation.
Updated 22 October 2026