SECURITY
Operational Security & Controls
VaultrixLabs is built with security controls across account access, data handling, and internal operations. This page outlines the measures in place — it is not a guarantee of invulnerability, and no online platform can promise absolute security.
Account Security
Passwords are hashed and never stored in plaintext. Login attempts are rate-limited with automatic lockout after repeated failures.
Email Verification
New accounts must verify their email address with a time-limited, single-use one-time code before proceeding.
OTP Protection
One-time codes expire after a fixed window, are attempt-limited, and are never stored in plaintext.
Role-Based Admin Access
Administrative staff are assigned specific roles — KYC review, payment verification, fulfillment, finance, support — each with scoped permissions.
Audit Logging
Every administrative action that changes customer or order data is recorded in an append-only audit log, including who performed it and when.
Document Protection
Uploaded identification documents are stored outside the public web root with randomized filenames and access-controlled retrieval.
Transaction Tracking
Every order status change is timestamped and recorded, creating a complete, reviewable history for each transaction.
Operational Controls
Payment verification and USDT fulfillment require explicit operator action — no balance is updated automatically without a paired ledger entry.
If you believe you've identified a security issue, please contact us directly rather than disclosing it publicly.