Security

Encryption

• All communications between your browser and our servers are protected by TLS 1.2/1.3 (HTTPS) with valid SSL certificates.
• Sensitive data stored in the database is encrypted with AES-256-CBC.
• Passwords are stored using secure hashing (bcrypt) and never in plain text.

Infrastructure & Hosting

• Our servers are hosted in Europe, in ISO 27001 certified datacenters.
• Data never leaves European territory, in compliance with GDPR.
• We use dedicated firewalls and 24/7 network monitoring.
• Daily automated backups with secure and encrypted retention.

Access Controls

• Secure authentication system with brute-force attack protection.
• Sessions with automatic expiration after a period of inactivity.
• CSRF (Cross-Site Request Forgery) protection on all forms.
• Validation and sanitization of all input data to prevent SQL injection and XSS.

Privacy by Design

• Our analytics system does not use cookies or track individual users.
• We only collect data strictly necessary for the operation of the service.
• We do not sell, share or transfer your data to third parties.
• Data is automatically deleted 30 days after account closure.

Monitoring & Incident Response

• Continuous monitoring of service availability and performance.
• Automated alert system for detection of anomalous activities.
• Documented security incident response procedures.
• Commitment to notify affected users within 72 hours, as required by GDPR.

Compliance

• GDPR (General Data Protection Regulation): Regulation (EU) 2016/679
• LPDP (Portuguese Data Protection Law): Law No. 58/2019 (Portugal)
• ePrivacy Directive: no tracking cookies

Vulnerability Reporting

If you discover a potential security vulnerability in our platform, we ask that you contact us responsibly. We will investigate all reports and respond within 48 hours.

Send your report to: seguranca@dashboard.pt