Security

Last updated: July 2026

Encryption

All data transmitted between your device and our servers is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.

Authentication

We use secure OAuth and session-based authentication. Passwords are hashed using bcrypt and never stored in plain text.

Infrastructure

SuperArc is hosted on Vercel and uses Supabase for data storage — both are SOC 2 compliant platforms with industry-leading security practices.

Vulnerability Disclosure

If you discover a security vulnerability, please report it to superarc.app@gmail.com. We take all reports seriously and will respond promptly.