Security Architecture & Infrastructure Protocols

Last updated: July 1, 2026

1. Data Protection & Isolation

We prioritize the protection of your studio's creative game IP. For full governance details, inspect our Privacy Policy and Terms of Service. Defensive layers include:

  • Row Level Security: Strict Row Level Security (RLS) enabled on all PostgreSQL database tables.
  • Vulnerability Scanning: Automated vulnerability scanning and dependency patching.
  • Network Isolation: Firewalls and Virtual Private Cloud (VPC) isolation for core database infrastructure hosting game studio data.

2. Authentication & Session Security

We implement secure session management and authentication protocols across our platform and game developer login gateways:

  • Password Hashing: Hashing of passwords using bcryptjs with strong salt factors.
  • Session Verification: JWT-based session verification with short expiration windows. Learn more in our Cookie Policy.
  • SSO Integrations: Support for OAuth 2.0 third-party authentications (Google, GitHub, Discord).

3. End-to-End Encryption Standards

Encryption protects your data during storage, transit, and integration pipelines:

  • In Transit: Forced HTTPS utilizing TLS 1.3 Cryptography.
  • At Rest: Full-disk storage encryption using AES-256 standards for GDD bibles and assets.
  • Integrations: Secret keys and webhook tokens are encrypted using database-level pg_crypto functions.

4. Backups & Disaster Recovery

To prevent data loss and ensure continuity for game development projects, we run robust recovery policies monitored live on our System Status:

  • Database Snapshots: Nightly automated database snapshots with multi-region redundancy.
  • Media Asset Redundancy: Redundant copies of media assets in high-durability cloud storage buckets.
  • Disaster Runbooks: Continuous monitoring of backup integrity and recovery runbooks.

5. Cloud Infrastructure Compliance

Our servers are hosted in high-availability data centers managed by leading cloud providers (AWS and Supabase):

  • Region Clustering: Primary database clusters located in Frankfurt/Dublin (EU West) regions.
  • Edge Delivery: Global content delivery network (CDN) edge routing.
  • Physical Security: Physical security controls at data centers conforming to ISO 27001 Security Standards.

6. Responsible Disclosure & Vulnerability Contact

We welcome security researchers. If you identify a vulnerability, please disclose it to us responsibly via our Security Contact Form or email us directly at:

Email: security@studio-os.cloud