1. Encryption in Transit & at Rest
Every connection to Ate App is secured with mandatory TLS 1.3 and HSTS (HTTP Strict Transport Security) preloading. All database storage volumes utilize AES-256 encryption at rest.
PCI-DSS Level 1
Payments are processed through Stripe/PayPal with tokenized card data. No card numbers are stored locally.
HMAC-SHA256 Signatures
Meta Instagram Webhook requests are cryptographically verified to prevent spoofing or replay attacks.
2. Vulnerability Reporting
Security researchers can report vulnerabilities directly to our team at info@ateapp.me. We acknowledge all verified reports within 24 hours.