Encryption
Marketplace API keys and sensitive secrets are protected with AES-256-GCM encryption. Network traffic uses encrypted HTTPS connections.
Authentication and sessions
Passwords are protected with bcrypt hashing. Session-based authentication, secure cookies and access checks reduce unauthorized account access.
Tenant isolation
Magallane uses a multi-tenant architecture designed to keep each seller’s records logically separated and available only within the authorized account.
Least-privilege access
Application access is limited to the permissions required for the requested workflow. Administrative access is restricted and should be used only for operational support and security response.
Operational safeguards
Logging, dependency maintenance, input validation and incident-response practices support the confidentiality, integrity and availability of the platform.