Security

Security is foundational to everything we build at StreetMining. We understand that our users trust us with sensitive financial workflows and we take that responsibility seriously.

We continuously invest in security practices, tooling, and training to protect the platform and the data it processes.

StreetMining is hosted on modern cloud infrastructure with built-in redundancy, automated failover, and continuous monitoring.

All data is encrypted at rest using industry-standard AES-256 encryption and in transit using TLS 1.2 or higher. Network access is tightly controlled through firewalls and private networking.

User authentication is powered by Supabase, providing secure session management, token-based access, and protection against common attack vectors.

We support multi-factor authentication (MFA) for all accounts and strongly recommend enabling it to add an additional layer of protection.

Our data handling practices are aligned with SOC 2 principles, covering security, availability, and confidentiality.

We conduct regular security reviews, vulnerability assessments, and dependency audits to identify and address potential risks before they become issues.

If you discover a security vulnerability in the StreetMining platform, we encourage you to report it responsibly. Please email security@streetmining.ai with a detailed description of the issue.

We ask that you give us reasonable time to investigate and address the vulnerability before disclosing it publicly. We appreciate the security research community and are committed to acknowledging contributions.

StreetMining maintains compliance with applicable data protection regulations and industry best practices. We regularly review our controls against evolving standards.

For questions about our security posture or to request documentation for your vendor review process, contact security@streetmining.ai.