Security
Controls that follow the entire scheduling lifecycle
GoSlotify applies authentication, tenant authorization, payment verification, secret protection, and rate limits at server boundaries.
01 · Safeguards
Implemented safeguards
This page describes current product controls and does not claim certifications that have not been earned.
- 01Server-enforced role and company authorization
- 02Bcrypt password hashing and email one-time codes
- 03One-way activation, consent, and session token digests
- 04Signed and idempotent Stripe webhook processing
- 05Encrypted provider credentials and protected environment configuration
- 06Rate limits for login, booking, signup, and support
- 07Public-safe error and maintenance experiences
- 08Audit history for sensitive developer and company operations
02 · Principle
Provider credentials stay out of public pages
Saved provider values are encrypted or held in protected platform configuration. Readiness screens show whether a service is configured without returning the secret itself.
Security you can read, not just trust.
Every control above is implemented today, no certifications claimed that we have not earned.