Security is core to our engineering culture. We build with a "security-first" mindset across all layers of the application stack.
Infrastructure
Our infrastructure is hosted on AWS and Vercel, top-tier cloud providers with robust physical and network security. We utilize strict IAM policies and VPC isolation to protect data.
Data Encryption
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. Sensitive keys and secrets are managed via strictly controlled environment variables.
Authentication
We partner with Supabase (powered by GoTrue) for authentication, ensuring industry-standard identity management, secure session handling, and protection against common attacks (SQLi, XSS).