1. Architecture principles
- Security and privacy are considered during design, not only after deployment.
- Data collection and retention are limited to what is operationally necessary.
2. Infrastructure protection
- TLS for external services and administrative access where applicable.
- Segmentation, role-based access, and regular maintenance of exposed components.
- Backups and operational recovery procedures for critical paths.
3. Monitoring and anti-abuse
Velora uses technical monitoring, audit logs, rate limiting, and anti-abuse controls to keep services stable and to investigate security events.
4. Vulnerability reporting
Security reports can be sent to [email protected] with steps to reproduce, impact, and supporting evidence.