Platform Security
Site Security
Security posture, compliance status, and audit logs for Intelligence Private Capital.
Security Score: Excellent
9 of 10 security checks passing. Platform is protected and compliant.
Security Checks
HTTPS / TLS Encryption
All traffic encrypted via TLS 1.3
Authentication Required
JWT-based session management with expiry
Role-Based Access Control
Admin, Agent, and User roles enforced server-side
XSS Protection
React DOM escaping + Content-Security-Policy headers
CSRF Protection
SameSite cookie policy + token validation
API Rate Limiting
Per-user rate limits on all backend endpoints
Data Encryption at Rest
AES-256 encryption on all stored entity data
Secure File Uploads
Files validated, scanned, and stored in isolated bucket
Audit Logging
All admin and data operations logged with timestamps
Two-Factor Authentication
Available via platform settings — enable for admins
Security Policies
Data Retention
90-day activity logs, indefinite entity data
Backup Frequency
Daily automated backups with 30-day retention
Session Timeout
24-hour inactivity logout
Password Policy
Managed via Base44 auth — bcrypt hashed
API Access
OAuth 2.0 + SDK token, scoped per user role
Compliance
SOC 2 Type II infrastructure (Base44 platform)
Recent Audit Log
No audit events found.