1. Encryption & Data Protection
All network traffic to and from Arkenwell is encrypted using standard TLS 1.2 and TLS 1.3 protocols. Databases and backups are stored encrypted at rest using AES-256.
2. Authentication Security
User login sessions are authorized via asymmetric RS256 JWT tokens signed with a 4096-bit RSA key pair. Email One-Time Passwords (OTPs) consist of 6-digit codes expiring in 10 minutes, processed strictly in-memory.
3. Infrastructure Sub-Processors
We partner with industry-leading infrastructure providers including Vercel (web hosting), Render (API backend), Supabase (managed database), SendGrid/Resend (email), and a PCI-DSS Level 1 certified payment gateway (payment processing).
4. Security Disclosures
If you identify a security vulnerability or bug, please report it directly to our security team:
Security Contact:
security@arkenwell.coWe acknowledge reports within 48 hours and work quickly to address valid security findings.