Security Overview

Your data security is our priority.

Infrastructure

LeadGuard AI is hosted on Netlify (dashboard) and Supabase (database), both of which maintain SOC 2 compliance. All data is stored in the US-East region.

Encryption

All data in transit is encrypted via TLS 1.2+. Database connections use SSL. Passwords are hashed using bcrypt. API keys are stored with one-way hashing — we cannot read your keys after creation.

Authentication

User authentication is handled via Supabase Auth with JWT tokens. API access requires bearer token authentication. All database tables enforce row-level security (RLS) ensuring users can only access their own data.

Payment Security

We never store credit card numbers. All payment processing is handled by Stripe, a PCI Level 1 certified processor. Billing data is stored exclusively on Stripe's infrastructure.

Monitoring

We monitor for unusual activity patterns, failed authentication attempts, and API abuse. Rate limiting is enforced on all endpoints.

Vulnerability Reporting

If you discover a security vulnerability, please report it responsibly to security@leadguardai.app. We take all reports seriously and will respond within 48 hours.

Questions

For security inquiries: security@leadguardai.app