Security Policy

Our mission

Payment: payments are processed by a PCI DSS certified payment provider. Card numbers never reach or get stored on CareMemoria servers.

Passwords

stored hashed in the database (Django PBKDF2), never logged in plain text or sent by email.

Connection

the whole site runs over secure HTTPS.

Admin access

restricted to a separate login, available only to the authorized project team.

Report a vulnerability

if you find a security issue, please write to [email protected] - we'll respond as soon as possible.