Security at Uniflow
We take the security of your data seriously. Our platform is built with industry-standard security practices to protect your information at every layer.
Encryption
All data transmitted between your device and our servers is encrypted using TLS 1.3 (Transport Layer Security). Data stored on our servers is encrypted at rest using AES-256 encryption. We follow encryption best practices to ensure your information remains confidential.
Authentication
We implement secure authentication mechanisms including:
- Password hashing using bcrypt with salting.
- Session management with secure, HTTP-only cookies.
- Role-based access control for university portals.
- Rate limiting and brute-force protection on login endpoints.
Infrastructure Security
- Hosting: Our platform is hosted on Vercel and Supabase, both SOC 2 compliant providers.
- Network Security: All services run behind firewalls with strict access controls.
- Monitoring: We continuously monitor our systems for suspicious activity and potential threats.
- Backups: Regular automated backups are performed to ensure data integrity and availability.
Application Security
- Regular security audits and vulnerability assessments.
- Dependency scanning to identify and patch known vulnerabilities.
- Input validation and output encoding to prevent injection attacks.
- CSRF protection on all state-changing operations.
- Strict Content Security Policy (CSP) headers.
Data Access Controls
Access to production data is restricted to authorized team members only. We follow the principle of least privilege, ensuring that each user and service has only the minimum level of access required to perform their functions. All access is logged and audited.
Vulnerability Disclosure
We welcome responsible disclosure of security vulnerabilities. If you discover a security issue, please report it to us immediately at contact@olajubajeifeoluwa93@gmail.com. We will acknowledge receipt within 24 hours and work to resolve the issue promptly.
Compliance
We are committed to compliance with applicable data protection regulations, including the Nigeria Data Protection Regulation (NDPR) and other relevant frameworks. We regularly review our security practices to align with industry standards and legal requirements.
Contact
For security-related inquiries, please reach out to: