Security and data practices.

Infrastructure

Maverick runs on Supabase (PostgreSQL) with row-level security enforced on every table. All data is encrypted at rest and in transit. Infrastructure is hosted in the EU with automatic daily backups.

Authentication

User authentication uses email verification. Sessions are persisted via encrypted storage. Passwords are hashed using bcrypt and never stored in plaintext.

Data handling

Manufacturer records are assembled from public sources. Evidence is attributed to its source. No personally identifiable information is shared between sourcing professionals and manufacturers without an explicit, opt-in introduction.

Access control

Row-level security enforces that users access only data they are authorized to see. Admin access requires explicit role assignment in the admin_roles table. All admin actions are logged with timestamps.

Vulnerability disclosure

To report a security issue, contact security@mavericknet.co. We acknowledge reports within 48 hours and follow responsible disclosure practices.