All traffic is served over HTTPS. Data at rest is encrypted via the underlying database provider.
Sessions are managed by Supabase Auth with rotating refresh tokens and HttpOnly cookies.
Every row in business tables is keyed to your user_id and protected by Row Level Security policies.
Suspect a security issue? Email security@vaypar.tech. We will respond within 72 hours.