Skip to main content
Version: 0.1

Security Overview

Safegloss applies layered security controls across the web app, data store, background jobs, and external providers.

Key Principles​

  • Least-privilege access for services and users.
  • HTTPS-only traffic.
  • Secrets managed via environment variables.
  • External providers treated as third-party processors.

Operational Controls​

  • Audit logs for sensitive actions.
  • Role-based permissions for teachers/admins/students.
  • Render-managed infrastructure with OS-level patching.