Your letters are personal. Upenned is built as a private archive, not a social network, and uses modern AWS security practices to help keep your account and correspondence protected.
- Your archive is available only after you securely sign in.
- Verified email addresses and strong passwords protect account access.
- Letters are encrypted while being sent and while stored.
- Original files stay private and are opened through temporary secure links.
- Access is limited to the systems and people needed to operate the service.
- Automated alerts tell us when the service fails or reaches its safety limits.
- Isolated backup copies protect against system failure. They are not a personal undo.
Using AI carefully
Upenned uses AI to prepare drafts of transcripts, translations, summaries, and historical context. AI can make mistakes, so the original always remains available and you can review and correct the results. AWS states that your letters are not used to train its foundation models. Upenned also does not use your letters or corrections to train another AI model unless you separately give permission.
How you can help protect your archive
Use a unique password, keep access to your email account secure, sign out on shared devices, and never share a password-reset code with someone else. Contact Upenned promptly if something about your account does not look right.
If you forget your password
Use the password-reset link on the sign-in page. Cognito sends a short-lived code to the verified email address on the account before allowing a new password. Upenned will never ask you to send that code or your password by email.
Responsible disclosure
If you believe you found a security problem, please do not access another person's information. Send what you noticed to security@upenned.com so it can be investigated.