Security

1. Our commitment to security

At Sofidoo, security is a fundamental priority. We take the protection of your data very seriously and work continuously to maintain a safe and trustworthy environment for all our users. We implement multiple layers of protection following industry best practices.

2. Data encryption

2.1 Data in transit

All communication between your browser and our servers is conducted through encrypted connections using TLS (Transport Layer Security). This ensures that the information you send and receive is protected against interception during transmission.

2.2 Data at rest

Data stored on our servers is protected using AES-256 encryption, one of the most robust encryption standards available today. This includes account information, listings, messages, and any other data we store.

3. Authentication

We use strong authentication mechanisms to protect account access:

• JWT tokens: We use digitally signed JSON Web Tokens to manage user sessions securely.
• Bcrypt passwords: All passwords are stored using bcrypt hashing with salt, making them extremely resistant to brute-force attacks.
• Two-factor authentication (2FA): We offer the option to enable two-factor authentication to add an extra layer of security to your account.

4. Infrastructure security

Our infrastructure relies on rigorous security practices:

• Dedicated VPS hosting: We use virtual private servers with isolated environments to prevent interference with other systems.
• Configured firewalls: We maintain strictly configured firewalls to filter unauthorized traffic.
• Regular updates: We apply security patches and updates regularly across all operating system components, databases, and software dependencies.
• Continuous monitoring: We monitor our infrastructure to detect and respond to suspicious activity.

5. Data backup

We perform automated daily backups to ensure your information is protected against accidental loss, hardware failures, or security incidents. Backups are stored securely and tested periodically to ensure their integrity and restore capability.

6. Vulnerability reporting

We value the community's collaboration in identifying potential vulnerabilities. If you discover a security issue on our platform, we ask that you report it responsibly through the following channels:

We are committed to investigating and responding to security reports in a timely manner. We appreciate that you do not publicly disclose the vulnerability until we have had the opportunity to assess and resolve it.

7. Compliance

Sofidoo strives to comply with applicable data protection regulations, including privacy and information security laws. We periodically review our policies and practices to align with current legal requirements and industry standards.