Last Updated: January 2025
Security Overview
Nebula Protocol is built with security as a foundational principle. We employ industry-standard security measures across all layers of our infrastructure to protect your data and digital assets.
Cloud Infrastructure
Our platform runs on Lovable Cloud, a secure and scalable cloud infrastructure that provides:
- PostgreSQL database with row-level security (RLS) for granular access control
- Enterprise-grade authentication system with encrypted password storage
- Secure file storage with automatic encryption at rest
- Edge functions for serverless backend logic with isolated execution environments
Data Encryption
We implement comprehensive encryption to protect your data:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Secure key management with regular rotation
- Client-side encryption for wallet recovery phrases
Authentication Security
Multiple layers of authentication protection:
- Bcrypt password hashing with salt
- Secure JWT tokens with short expiration times
- Email and phone verification for account recovery
- Identity verification for enhanced account security
Access Control
Strict access controls protect your data:
- Row-Level Security (RLS) ensures users can only access their own data
- Role-based access control for administrative functions
- Comprehensive audit logging for sensitive operations
- Principle of least privilege for all system components
Security Monitoring
Continuous monitoring and protection:
- Real-time threat detection and alerting
- Comprehensive security event logging
- Anomaly detection for suspicious activities
- Incident response procedures for security events
Compliance & Standards
Our security practices align with industry standards:
- GDPR-compliant data handling for EU users
- Industry best practices for cryptocurrency platforms
- Regular security assessments and updates
- Responsible vulnerability disclosure program
User Security Recommendations
Best practices to keep your account secure:
- Use a strong, unique password for your account
- Securely backup your wallet recovery phrase offline
- Beware of phishing attempts - we will never ask for your password
- Keep your browser and devices updated
- Complete KYC verification for enhanced account protection
Frequently Asked Questions
Common questions about security and data protection:
Security Contact
To report a security vulnerability or concern, please contact us at nebulaprotocolcloud@gmail.com with 'Security' in the subject line. We take all security reports seriously and will respond promptly.