In-depth security audit: penetration testing and code review across the whole platform.
What to know about how Nebufact protects your data.
In France. All data is hosted on servers located in France and compliant with GDPR. Bank details (IBAN/BIC) are encrypted with AES-256 and access is protected by two-factor authentication (2FA TOTP).
Every session token is revocable: logging out invalidates it instantly, and a global session_version lets you revoke every open session at once if a device is lost or compromised.
Rate limiting on authentication endpoints, together with OWASP-recommended security headers (HSTS, Content-Security-Policy, X-Content-Type-Options: nosniff) applied across the platform.