CTDMM · Security

Security & Platform Protection

Maintained by CTDMM (Sauoaiga Benjamin Malatai, ABN 87 935 788 011). This page describes current controls; it is not a certification.

How MioS protects your data

• Row-Level Security (RLS): every user-scoped and Circle-scoped table enforces access at the database layer — the app cannot return another Architect's rows even if the client asks.
• Role-gated Circles: Owner / Admin / Member / Viewer roles are checked by a security-definer function on every write.
• Client-side Vault encryption: sensitive Vault fields are AES-GCM encrypted in your browser with a passphrase only you hold; ciphertext is all we ever store.
• Server-only secrets: API keys and admin credentials never reach the browser bundle; they are read inside server functions at call time.
• Auth-guarded routes: the entire Architect console sits behind an authenticated layout with server-side session verification.

Platform protection (Lovable)

MioS is built and hosted with Lovable. The Lovable platform provides:

• Managed authentication via Lovable Cloud (Supabase-backed) — email, password reset, and OAuth providers including Google.
• Managed Postgres with row-level security and automated backups.
• Encrypted transport (HTTPS/TLS) on all preview, published, and custom-domain URLs.
• Secrets vault for API keys, isolated from the client bundle.
• Edge runtime for server functions with least-privilege database access.
• Continuous security scanning that flags misconfigured RLS, exposed secrets, and unsafe patterns during development.
• Lovable AI Gateway that routes model calls without exposing third-party API keys to the browser.

Shared responsibility

Lovable secures the underlying platform. CTDMM configures RLS, roles, and app-level logic. You, the Architect, are responsible for keeping your credentials safe, choosing strong Vault passphrases (which cannot be recovered if lost), and managing who you invite into your Circles.

Reporting a vulnerability

Email admin@ctdmm.com with details. Please do not publicly disclose issues before we have had a reasonable chance to respond.