Security
How we approach security on the website and demo.
Draft — pending legal review before launch.
Website
The website is served over HTTPS with security headers. Forms are validated server-side with spam protection, and no production client credentials are exposed in front-end code.
Public demo isolation
The demo runs with fictional data only, never connects to a production merchant database, uses sandbox payment behavior, and disables live outbound email, SMS, and third-party actions.
Reporting an issue
To report a potential security issue, email info@bbtcommerce.com with the subject "Security".