Security Policy

1. Security Overview

At Lumigenc Technologies, security is engineered into every system layer. We enforce bank-grade security protocols to protect client credentials, OAuth tokens, financial transactions, and database assets against unauthorized access and data breaches.

2. Encryption Standards

• Data in Transit: All network traffic between your device and Lumigenc servers is encrypted using modern HTTPS protocols (TLS 1.3) with HSTS headers enabled.
• Data at Rest: Application databases, backup files, and sensitive OAuth tokens are encrypted at rest using AES-256 standard encryption.

3. Authentication & OAuth Security

Account passwords are hashed using bcrypt with salted work factors. Third-party integrations (LinkedIn, Meta, Google SSO) rely exclusively on OAuth 2.0 protocol standards, ensuring Lumigenc never sees or stores your third-party account passwords.

4. Infrastructure Security

Lumigenc applications are hosted on enterprise cloud infrastructure provided by Vercel and Amazon Web Services (AWS). Our hosting environments feature DDoS protection, automated firewall subnetting, and container isolation.

5. Access Control & Monitoring

Internal database access is restricted to authorized engineering personnel following least-privilege role-based access control (RBAC) principles. Production environments log API activity and perform continuous error tracking.

6. Responsible Vulnerability Disclosure

We welcome reports from ethical security researchers. If you discover a potential security vulnerability, please report it responsibly to our engineering security desk: