Trust & Security
Security at PromptMantra
We take the security of your data seriously. Here's how we protect your brand intelligence.
🔒
Encryption
- ✓All data in transit is encrypted using TLS 1.2+
- ✓Database connections use encrypted channels
- ✓Passwords are hashed using bcrypt with per-user salts
- ✓API keys and secrets are stored in encrypted environment variables
🏗️
Infrastructure
- ✓Hosted on SOC 2 compliant cloud infrastructure
- ✓Container-based deployment with Docker for isolation
- ✓PostgreSQL database with automated backups
- ✓Redis for secure session management with TTL-based expiry
- ✓Private networking between application services
🔐
Access Controls
- ✓Role-based access control (RBAC) for all users
- ✓JWT-based authentication with short-lived access tokens
- ✓Refresh token rotation for session security
- ✓Production systems restricted to authorized personnel only
- ✓All administrative actions are logged for audit
🛡️
Application Security
- ✓Input validation and sanitization on all endpoints
- ✓CORS policies restricting cross-origin requests
- ✓Rate limiting on authentication endpoints
- ✓SQL injection prevention via parameterized queries (SQLAlchemy ORM)
- ✓Regular dependency updates and vulnerability scanning
📊
Monitoring & Response
- ✓Real-time application health monitoring
- ✓Automated alerts for service degradation
- ✓Structured logging for security event tracking
- ✓Incident response procedures documented and tested
🔍
Data Handling
- ✓AI engine queries are made on your behalf — your prompts are not shared with other users
- ✓Brand monitoring data is isolated per organization
- ✓Data export available in standard formats (CSV/JSON)
- ✓Account deletion results in data removal within 30 days
🐛 Report a Vulnerability
If you discover a security vulnerability, please report it responsibly. We appreciate your help in keeping PromptMantra secure for everyone.
Contact security@146.190.147.44 →