Security audit status

[tantrev]

Since docassemble seems amenable for collecting personally identifiable information, I am just curious if it has had any formal security audits.

[jhpyle]

The security section of the documentation contains an informal self-audit, but no formal security audit has been done. At some point I may apply for a pro bono security audit from Websec.

[jhpyle]

I am closing this issue because it is really old. Some formal security audits have been done but none I know of have been finished.