Security posture

Private Media

Customer images and content should stay in private storage. No public storage buckets are part of the intended design.

Enrollment Gates

Access is controlled by store/customer enrollment, app access state, and authenticated customer context.

Audited Support

Staff and support access should be scoped, reasoned, and audited before commercial rollout.

Disclosure

Responsible disclosure process is pending. For now, contact [email protected].