Security Policy

Managed authentication with email verification, session refresh and administrator allowlist.

Row-level security on every application table and server-side role checks on privileged endpoints.

Audit logging of administrator actions, subscription-state changes and account-lifecycle events.

Encrypted transport (HTTPS/TLS) and hardened response headers on API routes.

Maintenance mode with administrator bypass for controlled incident response.

PrediShark AI operates the platform, database and administration console. You are responsible for keeping your credentials safe, enabling the platform-provided controls in your own workflow and complying with the laws that apply where you use the service.

Application data is stored in managed Postgres with provider-managed backups and point-in-time recovery. Availability targets follow the underlying provider’s service level.

If you believe you have found a vulnerability, please report it privately before public disclosure. Include reproduction steps and impact. Contact: office@predishark.ai. We will acknowledge receipt and coordinate a remediation timeline. Please do not perform disruptive testing, access data that does not belong to you or run automated scans against production.