HTTPS and strict browser security headers
Server-side validation and bot controls
Supabase row-level security for lead records
No public database keys with administrative access
Minimal enquiry data and retention controls
No request for private keys or token passwords
Responsible disclosure
If you believe you found a vulnerability, email info@dscsign.in with “SECURITY” in the subject. Do not access, alter or retain other people’s data.