Security Policy

Our Security Commitment

We use industry-standard security controls to protect your account, data, and transactions, including encryption in transit and at rest.

Technical Measures

• TLS 1.3 for all data in transit; AES-256 for data at rest.
• Network segmentation, WAF, and continuous monitoring.
• Regular vulnerability scans and third‑party penetration tests.
• Principle of least privilege and audit logging for access.

Operational Practices

• Background checks and ongoing security training for staff.
• Secure SDLC with code reviews and dependency auditing.
• Business continuity and disaster recovery planning.
• Incident response with 24/7 on‑call coverage.

If you believe you’ve found a vulnerability, please contact support and we’ll triage immediately.