Skip to content

Security Standards

How we encrypt logs, manage API tokens, secure cookie access, and prevent malicious SMS injection.

Transport Layer Encryption

All requests to our website and GraphQL API are encrypted in transit using TLS 1.3. We implement strict HTTP Strict Transport Security (HSTS) headers.

Secure Cookie Audits

Auth tokens are stored strictly in HTTP-Only, Secure cookies with SameSite=Lax flags to mitigate Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF).