Identity
Supabase Auth with email verification and short-lived access tokens.
Security Architecture
LabCare is designed around private storage, row-level access controls, server-only secrets, Stripe-hosted payments, and user-controlled data retention.
Storage
Private report bucket with per-user paths and signed access.
Database
Postgres Row Level Security so members can access only their own records.
AI
OpenAI requests originate from Netlify Functions; secret keys never appear in browser code.
Payments
Stripe Checkout handles cards and eligible wallets.
Operations
Admin access requires a database role and server-enforced policies.
This page describes planned controls, not a certification. Independent testing is required before production use.