Security

We secure accounts with modern auth, protect payments via vetted processors, and deliver content using signed, expiring links with TraceLock™ device receipts.

• Transport security: HTTPS/TLS 1.2+ everywhere.
• Data-at-rest encryption for sensitive records.
• Least-privilege access, audit logging, and break-glass controls.
• Backups with regular restore drills.

We never store full card numbers. Payments flow through PCI-compliant providers (e.g., Segpay). KYC/ID is handled by specialized vendors; only necessary verification hashes/flags are retained.

Email security@solnaras.com. Please include steps to reproduce and impact. We commit to prompt triage and responsible disclosure.