Security & Trust
Defense in Depth Architecture
HTTPS & TLS 1.3
All data in transit is encrypted using modern cryptographic cipher suites.
Row-Level Security
User records are protected with PostgreSQL RLS policies against unauthorized IDOR access.
Zero Secrets Exposure
All third-party AI tokens and Stripe keys are locked inside server-side environments.
Rate Limiting & Anti-Abuse
Edge rate limiting prevents DDoS, prompt injection, and credential stuffing attacks.