Security
How we look after your writing
A manuscript is years of work. It is also the one thing you cannot easily write twice. So it matters where your book is kept, who can reach it, and what happens if something goes wrong. This page says plainly what we do.
“There are two types of people in the world: those who have lost data, and those who are about to.”
Who we are
Mythwrite is built and run by Tian Digital Security Ltd, a UK IT security company (Company No. 09278102). You can find us at tiandigitalsecurity.com.
Our founder, Toby Flaxman ChCSP, is a Chartered Cyber Security Professional and Chief Security Officer of Tian Digital Security.
Where your writing lives
Your writing is stored on Tian's own servers in the UK. Encrypted off-site backups are kept in Oracle Cloud's UK (London) region.
Backups you can rely on
We take nightly database backups and keep them for 14 days. Every week, an automated restore test restores the latest backup into a separate throwaway database and checks the data.
That test matters because a backup you have never restored is only a hope. This way we know our backups work, not just that they exist.
Encryption
- All connections to Mythwrite are encrypted (HTTPS, via Cloudflare).
- AI provider API keys that you save are encrypted at rest.
- Off-site backups are encrypted before they leave our servers.
Keeping the doors locked
- Your sign-in session is re-checked against our database on every request.
- Sensitive actions are recorded in an audit log.
- Uptime is monitored every 5 minutes, and we are alerted if something stops responding.
- We patch critical security updates promptly.
Testing our defences
A penetration test is an authorised, simulated attack carried out by a security professional, to find weaknesses before criminals do.
Our founder, a chartered security professional, carries out hands-on checks of this kind against Mythwrite. We also completed a full code security review in October 2026 and patch critical security updates promptly.
What you control
- Export your whole book any time: DOCX, Markdown, EPUB, PDF, or a re-importable ZIP.
- AI is optional, and it uses your own provider keys.
- Privacy Mode proofing runs in your browser.
- Our product analytics are cookieless and EU-hosted, and you can opt out in your settings or on the privacy page. We also honour your browser's Global Privacy Control and Do Not Track signals.
- Analytics never receives your manuscript text, titles, names or email addresses.
Reporting a security problem
If you think you have found a security problem, please email [email protected]. Thank you for telling us.
To check whether Mythwrite is up right now, see the status page.