Security
Protection of accounts, files and provider keys in MadeinVox.
Updated on October 22, 2026Accounts and access
Passwords are stored as hashes and sessions are managed server-side. Sensitive actions use CSRF protection. Workspace roles (owner, administrator, editor, viewer) limit what each member can do; some actions are reserved for the platform’s administrators.
Media and secrets
Project files are stored on the server and copied to Cloudflare storage. Provider keys remain in the server configuration and are never sent back to the browser. Provider tasks are logged to allow processing to be audited.
Backups
A backup of the database (accounts, minutes, payments) is made every day. It is kept for 35 days in Cloudflare storage (the 7 most recent are always kept) and for 3 days on the server disk. Malware detection is not yet in place. Contact the team to report a vulnerability.