Authentication & Authorization
- ✓ Server-side sessions in secure cookies (Secure, HttpOnly, SameSite)
- ✓ One-time code to enter your hub
- ✓ Sign in with Google
Data Protection
- ✓ Encryption in transit and at rest
- ✓ HTTPS only, with TLS 1.2 or 1.3
- ✓ Salted password hashing (PBKDF2)
Infrastructure Security
- ✓ Amazon Web Services, Ireland region (eu-west-1)
- ✓ Continuous backups, point-in-time recovery for 14 days
- ✓ DDoS protection and WAF on AWS
- ✓ High availability on AWS
Compliance
- ✓ GDPR compliant
- ✓ Cookie consent (django-cookie-consent)
- ✓ Rate limiting per IP and WAF
- ✓ Data retention policies