Loading...
Platform security
Learn about account protection, payment checks, and how access to your data is controlled.
Active controls
Role-based access
01.
Core Platform Security
Role-Based Access Control
Admin-only operations are protected by role checks and restricted edge endpoints.
Data Isolation
Row Level Security policies are enforced to limit access scope per user and role.
Payment Integrity
Razorpay signatures are verified server-side before enrollment and invoice creation.
Consent Controls
Cookie preferences can be reviewed and updated at any time from the footer.
Our platform provider
otsec academy uses Lovable. Lovable reports SOC 2 Type II and ISO 27001:2022 assurance for its own services. These are provider assurances, not an independent audit or certification of otsec academy.
View Lovable's Trust CenterYour privacy choices
Using a platform provider does not by itself establish GDPR compliance for this app. Read our privacy policy or send a request about your personal data.
02.
Platform Hardening
- Encrypted in transit. Every request is served over HTTPS/TLS, with HSTS enforced at the edge.
- Secrets stay server-side. Production keys are held in managed server-side storage and are never shipped to the browser — only a public, restricted client key reaches your device.
- Least-privilege by design. Row-Level Security and server-side authorization gate privileged actions; the public client key carries no elevated access.
- Responsible disclosure. A published security.txt file and a monitored security contact route reports straight to triage.
03.
Reporting & Contact
Found a vulnerability or suspicious behavior? Report it to our security team for triage.
Security Contact
Email: info@otsec.academy