Trust Center
Security you can verify.
Liulum is built to protect your revenue — and your data. Here's exactly how we do it.
Security
Liulum is built with security as a first principle. All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- TLS 1.3 for all API communication
- AES-256 encryption for stored credentials
- JWT-based session authentication (7-day expiry)
- HMAC-signed webhooks (Razorpay, custom)
- Signed telemetry snippets prevent spoofing
Credential Storage
Your hosting tokens (Vercel, Cloudflare) and automation credentials are encrypted at rest and never exposed in logs.
- AES-256-GCM encryption via memory/crypto.ts
- Tokens validated before storage
- Never logged or included in error reports
- Per-project credential isolation
Backups & Data Retention
Your data is protected with automated backups and GDPR-compliant retention policies.
- Automated daily PostgreSQL backups
- 30-day data recovery on account deletion
- GDPR-compliant data export (JSON)
- Automated retention sweep (daily cron)
Audit Logs
Every action in Liulum is logged with an immutable audit trail.
- Append-only JSONB audit trail on every repair step
- Incident timeline (diagnosis, repair, verification, resolution)
- Admin action logging
- Client-visible activity history
Incident Response
When Liulum detects an issue, the response is automatic and auditable.
- Automated detection via 13 monitoring engines
- Safe Repair Mode (snapshot → repair → verify → restore)
- Automatic rollback on repair failure
- Business verification after every repair
Responsible Disclosure
Found a vulnerability? We want to hear from you.
- Email security@liulum.com with details
- We respond within 48 hours
- Credit given for responsible disclosure
- Bounty for critical findings
Compliance roadmap
| Standard | Status | Details |
|---|---|---|
| GDPR | Compliant | Data export, deletion, retention policies |
| SOC 2 | In Progress | Roadmap: Q3 2026 |
| PCI DSS | N/A | We never store payment data — Razorpay handles all payments |
| ISO 27001 | Planned | Roadmap: Q4 2026 |