Security

Security isn't a feature we bolt on — it's part of how we build. Several of our products handle sensitive data like phone numbers and email, so we treat protecting it as a core responsibility.

This page describes the practices we hold ourselves to across our products and client engagements.

Data is encrypted in transit using modern TLS, and sensitive data is encrypted at rest. Secrets and credentials are stored in dedicated secret managers, never in code.

We run on reputable cloud providers with network isolation, least-privilege access, and automated patching. Backups are taken regularly and tested for restore.

Access to production systems is limited to the people who need it, protected by strong authentication, and logged. We review access regularly and remove it promptly when it's no longer needed.

If you believe you've found a security vulnerability, please email security@luxavero.net with the details. We'll acknowledge your report, investigate, and keep you updated — and we're grateful for the help.

For any security or data-handling questions, contact us at hello@luxavero.net.