Security

Data Handling & Security

  • API keys are stored only as SHA-256 hashes.
  • Passwords are stored with bcrypt.
  • Uploaded files live in Emergent object storage with per-account path isolation.
  • The master contact database is accessed with read-only credentials.
  • Payment signatures are verified server-side; mock-payment endpoints are disabled in production.