Security — EXIM CAMP

This page describes the technical and organisational security controls EXIM CAMP uses to protect your account and export data. This page is maintained by EXIM CAMP to answer common security questions about the Service. It is not an independent certification.

1. Data Encryption

In transit: All traffic is served over HTTPS with TLS 1.2 or higher.
At rest: Database and object storage are encrypted at rest using AES-256.

2. Authentication

Password hashing with industry-standard algorithms.
OAuth sign-in via Google.
Session tokens issued as short-lived JWTs with refresh rotation.

3. Access Control

Row-level security (RLS) isolates every user's tool runs, profiles, and roles at the database layer.
Administrative access requires role verification via a dedicated user_roles table and security-definer function — roles are never client-editable.
Employees access production data only under least-privilege principles with audit logging.

4. AI Provider Handling

Inputs are routed through Lovable AI Gateway to underlying model providers with training opt-out. Inputs and outputs are stored in your account only, isolated by RLS.

5. Infrastructure

Cloudflare Workers edge runtime for the app tier.
Managed Postgres with automated backups.
DDoS protection and WAF at the edge.

6. Monitoring & Incident Response

Real-time logging of authentication, database, and edge events.
Alerting on anomalous access and error spikes.
Documented incident response plan with 72-hour breach notification per our DPA.

7. Vulnerability Reporting

Report security issues to security@exportiq.app. We commit to acknowledging within 2 business days.

8. Compliance Roadmap

Formal SOC 2 and ISO 27001 audits are on our roadmap. We do not currently claim SOC 2, ISO 27001, HIPAA, or PCI DSS certification.

9. Shared Responsibility

You are responsible for keeping your credentials safe, restricting who in your organisation has access, and ensuring you have legal basis to submit third-party data (such as overseas buyer contacts) into the Service.