Security at Brains4Ai

We take the security of our platform and your data seriously. STORMchat is built with security-first principles at every layer.

Data Protection

• All data encrypted in transit via TLS 1.3
• Passwords hashed with bcrypt (cost factor 12)
• JWT tokens with short expiry windows
• No plaintext storage of any credentials

Payment Security

• Payments processed exclusively by Stripe (PCI DSS Level 1)
• No card data touches our servers
• Webhook signatures verified on every event

Infrastructure

• Hosted on Railway with private networking between services
• Cloudflare proxy + DDoS protection on all public domains
• Rate limiting on all API endpoints
• Input sanitization and SQL injection prevention

Responsible Disclosure

Found a vulnerability? Please report it responsibly to storm.s4ai@gmail.com. We review all reports and respond within 48 hours.