Security
How Asset Archive stores files and accounts today. This is an operations summary, not a pentest report.
Encryption
Data in transit uses TLS. Object storage is encrypted at rest with the cloud provider.
Authentication
Customers sign in with better-auth on the portal. Internal admins use Stack Auth. The two systems do not share sessions.
Access control
Workspace membership gates uploads and brand edits. Public endpoints only return published kits.
Disclosure
Report issues to hello@assetarchive.co. See Trust and Compliance.
