Security
Your data is treated as confidential operational telemetry.
HTTPS enforced end-to-end, no mixed content.
Firebase Authentication manages session tokens and CSRF protection.
Uploads are validated server-side (CSV/Excel only, ≤10MB, schema-checked, macros rejected) and never executed.
Firestore rules ensure users can only read and write their own data.
Uploaded telemetry is encrypted at rest in Firebase Storage with strict access rules.
Every data-access event is logged with user, action, and timestamp.