Security

We take security seriously. Here is how we protect your data and our infrastructure.

Infrastructure

Encryption

All data is encrypted in transit using TLS 1.3 and at rest using AES-256. Database connections use SSL with certificate verification.

Hosting

The platform runs on isolated, containerized infrastructure with automated scaling and redundancy. We use managed Kubernetes for orchestration.

Access control

Internal access follows the principle of least privilege. All administrative actions are logged and audited. Multi-factor authentication is required for all team members.

Application security

  • Authentication via OAuth 2.0 with secure session management
  • All external API calls are proxied server-side to prevent credential exposure
  • Input validation and sanitization on all user-provided data
  • Rate limiting on all API endpoints to prevent abuse
  • Multi-tenant data isolation at the database level

Data handling

We minimize data retention. API responses used for charting are processed in memory and not persisted beyond the current session. Knowledge graph entries store only metadata about API endpoints, not the data itself.

Your API keys and credentials are stored encrypted and are never exposed in logs or error messages. We do not share your data with third parties except as required to operate the service.

Responsible disclosure

If you discover a security vulnerability, please report it responsibly. We appreciate the security research community and will work with you to resolve issues quickly.

Report vulnerabilities to security@glacierhub.com