Security Architecture
Bank-Grade Data Encryption • Supabase Row Level Security (RLS) • Continuous Infrastructure Auditing
TLS 1.3 Encryption
All data in transit is encrypted using modern TLS 1.3 with AES-256 GCM cryptographic protocols.
Strict RLS Isolation
Every database row is protected by Supabase Row Level Security, ensuring complete data isolation between coaches.
Threat Protection
Automated edge DDoS mitigation, rate-limiting rules, and web application firewall (WAF) filtering.
Database Security & Multi-Tenant Isolation
PlatCoach utilizes a modern PostgreSQL multi-tenant architecture powered by Supabase. Every database table (clients, check-ins, diet plans, workout splits) enforces strict Row Level Security (RLS) policies. A coach can only read and modify data belonging explicitly to their authenticated coach account ID, preventing any possibility of cross-tenant data leaks.
Authentication & Session Management
Authentication is handled via secure OAuth 2.0 and JWT session tokens stored securely in HTTP-Only cookies. Passwords are never stored in plaintext and are salted and hashed using industry-standard bcrypt/Argon2 algorithms.
Payment Security & PCI Compliance
PlatCoach does not store full credit card numbers or sensitive CVV codes on our servers. All subscription payments are processed directly through PCI-DSS Level 1 certified payment processors.
Vulnerability Reporting & Bug Bounty
We welcome security researchers and ethical hackers to report vulnerabilities. If you discover a potential security concern, please submit your technical report to security@platcoach.com.