Security
Security at Nimbus
This page is maintained by the Nimbus team to summarize the security controls currently enabled in our app.
Authentication
Email + password and Google OAuth, backed by a managed auth provider. Sessions use short-lived tokens.
Access control
Row-Level Security scopes every user-facing table to the authenticated user. Admin actions are gated by a separate roles table.
Data in transit and at rest
All traffic is served over HTTPS. Database storage is encrypted at rest by our hosting provider.
Responsible disclosure
Report vulnerabilities to security@nimbus.example. We'll acknowledge within two business days.