Security
How accounts and payments are protected
Stripe and Paystack webhook signatures are verified before subscription state changes. A second sign-in check is required before SMA Pro is turned on.
What is in place
- Stripe and Paystack webhook signatures are verified before they change an account
- Integration tests cover initialize, signature rejection, and webhook entitlement activation
- A second sign-in check, with recovery codes, for account owners and SMA Pro customers
- Repeated sign-in, billing, and export attempts are limited
- Sensitive account actions are kept, and earlier entries stay in the record
What is still open
- Observed charged production (or live-key staging) payment, renewal, and cancellation evidence
- Public claim of live-money GA remains withheld until that observation is recorded
An outside security review is published each year. SOC 2 Type I is a target for the fourth quarter of 2026.