Data Protection
All data in transit is encrypted using TLS 1.2 or higher. Sensitive credentials including OAuth tokens and API keys are stored with encryption at rest. We follow the principle of least privilege for internal access and conduct regular security reviews of our infrastructure and codebase.
Authentication and Access
User authentication uses secure one-time passwords delivered via email, eliminating the risks associated with stored passwords. Session tokens are stored in HTTP-only cookies with secure flags. Rate limiting protects against brute force attempts and automated abuse.