How we protect your data on Injekt Systems.
Sign-in is handled by Supabase Auth with email confirmation. Sessions use HttpOnly, Secure, SameSite=Lax cookies. Multi-factor authentication can be enabled per account.
All data in transit is encrypted with TLS 1.2+. Data at rest in Supabase (Postgres + Storage) is encrypted by default. Row Level Security policies enforce per-user access at the database layer.
Uploads are limited to 50 MB and a strict MIME-type allowlist. Files are stored in a private bucket and accessed only via short-lived signed URLs.
We apply security headers (CSP, HSTS, X-Frame-Options DENY), rate-limit auth and write endpoints, and maintain an immutable audit log of sensitive actions. Dependencies are scanned via npm audit.
Found a vulnerability? Please email support@injektsystems.com with details. We acknowledge within 2 working days and aim to resolve confirmed issues within 30 days. We don't currently run a paid bug bounty.