信任与安全
信任与安全
Answers to common security and privacy questions.
This page describes controls we operate today. It is not an independent certification.
Authentication & access
Email and password with hashed storage; role-based access and row-level policies on every user-facing table.
Encryption
TLS in transit. Sanctuary mode adds AES-GCM 256 encryption in the browser; keys never leave your device.
Data hosting
Application and managed database infrastructure are hosted in the European Union.
Retention
Sanctuary files are deleted automatically after 48 hours. Activity logs are retained for auditability.
Reporting a vulnerability
Contact us with the subject [SECURITY]. We reply within 24 hours. contact@unpourtousettouspourun-asso.fr
Shared responsibility
Members remain responsible for passwords, device security and the accuracy of entered data. Bonjour