Skip to main content
The code implements authenticated API requests, account ownership checks for user and provider data, password hashing, time-limited sessions, and encrypted storage for uploaded provider credential files. This page summarizes code-level controls; it is not a security certification or a complete deployment assessment. Hosting configuration, TLS termination, backup security, access to operational logs, and incident response depend on the deployed environment and require maintainer confirmation. See credentials and permissions and data handling.