Protecting our customers' and their buyers' data is part of the service.
Infrastructure
- hosting and backups in the EU,
- TLS, HSTS and strict security headers,
- daily database and file backups with tested restores.
Application
- tenant isolation in every query,
- roles (owner, admin, sales, installer) with least privilege,
- Argon2id passwords, HttpOnly sessions, CSRF protection, rate limiting,
- inquiry prices always recalculated on the server,
- audit log of important actions.
Buyer privacy
- no third party cookies in the configurator,
- photos for "On my photo" stay on the buyer's device,
- one-click erasure of buyer data on request.
Reporting vulnerabilities
Report responsibly to info@configli.com. We respond within three business days.
