GO-180 Trust Center
Built by veterans. Built on trust.
See what we're building, how we protect your data, and how to reach us.
Your data, protected
GO-180 carries the sensitive records of people who served. Here's the short version of how we keep them safe — the full technical and legal detail is one click away.
- Documents encrypted at rest with AES-256-GCM
- Encrypted in transit with TLS 1.2+ and HSTS
- Two-factor authentication for all administrators
- We never sell your data — no ads, no brokers
- Card numbers never touch our servers (PCI SAQ-A)
- Tamper-evident audit log of sensitive actions
Security & compliance
How we protect you
Six pillars carry the platform's security. Each is implemented in the product today, not a promise for later.
AES-256
Document encryption at rest (GCM)
TLS 1.2+
Encrypted in transit, 1-year HSTS
0
Card numbers stored — PCI SAQ-A
7-yr
Tamper-evident admin audit trail
ENCRYPTION EVERYWHERE
Your documents are sealed with AES-256-GCM, and every connection is protected with modern TLS. Files stay unreadable even if storage is breached.
STRONG SIGN-IN
Passwords are hashed with Argon2id, logins lock out after repeated failures, and administrators must use two-factor authentication.
HARDENED BY DEFAULT
Strict transport, content-security, and anti-clickjacking policies ship on by default, with tiered rate limits across sensitive endpoints.
SAFE PAYMENTS
Card details are entered on Stripe and never reach our servers. Billing events are cryptographically verified before anything changes.
MINIMUM-NECESSARY ACCESS
Health and financial fields are automatically redacted from staff who don't need them, and sessions log out after 15 idle minutes.
ACCOUNTABLE BY DESIGN
Sensitive actions are written to an append-only, HMAC-chained audit log, so the history of who-did-what can't be quietly altered.
Changelog
What's new
- Faster budget pages — financial budget lists now load in a single database query instead of one per item, so months with many categories load instantly.
- Faster relocation checklists and sponsor admin tools — added the missing database indexes that were silently turning filtered queries into full table scans.
- Better discoverability in AI search — added structured data (Schema.org) so ChatGPT, Perplexity, and Google Knowledge Panel can correctly identify and recommend GO-180 to veterans.
- Keyboard users can now navigate the admin applications table — table rows are now reachable, focusable, and activatable with Tab + Enter.
- Twitter / X link previews now render the full image card instead of a tiny thumbnail (we were missing the width/height the validator requires).
Your data
What this means for you
ENCRYPTED AT REST
Your documents are encrypted with AES-256-GCM. Even if someone breaches our servers, your files are unreadable.
NEVER SOLD
We don’t sell your data. No ads, no third-party data brokers. Period.
HIPAA COMPLIANCE PATH
We’re on the path to full HIPAA compliance. Your health and financial data gets hospital-grade protection.
VETERAN-OWNED
Built by veterans, for veterans. We understand what you’re going through because we’ve been there.
LOGIN PROTECTION
Failed login lockout, encrypted tokens, optional two-factor authentication.
In crisis?
We've got you
Last updated: April 10, 2026