Security

StateScope is built with security as a first principle:

• License numbers, DEA numbers, and certification numbers are encrypted at rest using AES-256-GCM.
• PII is never logged. Sensitive identifiers are masked in the UI (last 4 digits only by default).
• We do not store portal login credentials — those stay with you.
• All data is transmitted over TLS. Authentication uses Supabase Auth with industry-standard token handling.

Full security disclosure coming soon. Questions? Contact us at [email protected].