Trust & Security
Security at SastuDeals
We protect data with secure-by-default infrastructure, least-privilege access, and continuous monitoring.
Platform Security
We implement layered security controls across the application, data, and infrastructure layers.
- Secure authentication with server-side sessions and HttpOnly cookies.
- Transport security (TLS) for data in transit.
- Access controls and role-based entitlements for sensitive data.
- Rate limiting and input validation on critical endpoints.
Data Protection
Customer data is handled according to privacy and security best practices.
- Access to production data is restricted to authorized personnel.
- Audit logging is used for key administrative and data actions.
- Backups and disaster recovery procedures are in place.
AI Safety & Controls
AI features are built with safeguards to minimize risk and protect user data.
- Only relevant inputs are shared with model providers to generate responses.
- Responses are logged for quality monitoring and troubleshooting.
- AI outputs are advisory and should be validated for investment decisions.
Responsible Disclosure
If you believe you’ve found a security issue, please report it to security@sastudeals.com.