Security

Data protection

• Authentication

  Sign-in via OAuth (e.g. Google, GitHub). We do not store passwords; sessions are secure and configurable.

• Encryption

  Data in transit is encrypted (HTTPS). Sensitive data at rest is protected per our data handling policies.

• Access control

  Role-based access; admin and org features are restricted. Input validation and injection prevention are applied.

Reporting security issues

If you discover a security vulnerability, please report it responsibly. Do not disclose it publicly before we have had a chance to address it. Email support@codevensiva.com with the subject "Security report" and a description of the issue. We will acknowledge and work with you to resolve it.