you can test it :-D
we use multi-signature user-side encrypted HD wallets, that are so secure that, thanks to a backup transaction, allows you to withdraw your bitcoins even when the website is completely offline. All code is user-side in javascript and so to say open source, so you can see what is happening.