Security
Your documents are private and protected. Here's how.
Encryption
All data is encrypted in transit (TLS 1.3) and at rest. Your documents are stored securely in MongoDB Atlas with encryption enabled.
Authentication
We use industry-standard OAuth 2.0 for Google sign-in and bcrypt for password hashing. Sessions are managed with secure HTTP-only cookies.
Access Control
Every API endpoint verifies authorization server-side. Users can only access their own projects unless explicitly shared.
Infrastructure
Hosted on Vercel's edge network with automatic DDoS protection. Database hosted on MongoDB Atlas with automated backups.
Input Validation
All user inputs are validated and sanitized to prevent XSS, injection attacks, and malicious file uploads.
Vulnerability Reporting
Found a security issue? Please report it responsibly to security@lumensic.app. We take all reports seriously.