Security

AIMaker Studio is built on enterprise-grade cloud infrastructure with multiple layers of security: • Data is stored in secure, encrypted databases • Infrastructure is hosted in SOC 2 compliant data centers • Regular automated backups with point-in-time recovery • Geographic redundancy to support availability • Network-level DDoS protection

We protect your data with industry-standard encryption: • All data in transit is encrypted using TLS 1.3 • Sensitive data at rest is encrypted using AES-256 • Authentication tokens are securely hashed • Payment information is handled by PCI-DSS compliant processors (Stripe) and is not stored on our servers

AIMaker Studio uses Supabase for authentication, providing: • Secure email and password authentication • JWT-based session management with automatic expiry • Row-level security (RLS) designed so users can access only their own data • Secure OAuth flows for third-party authentication • Brute-force protection and rate limiting

Our application is built with security best practices: • Input validation and sanitization on user inputs • Protection against SQL injection, XSS, and CSRF attacks • Secure HTTP headers and Content Security Policy • Regular dependency updates to patch known vulnerabilities • Automated security scanning in our CI/CD pipeline

AI-generated content is handled with care: • AI prompts and outputs are processed securely • Content safety filters are applied to AI generations • Generated content is stored in user-isolated storage • AI providers are vetted for security and privacy compliance

In the event of a security incident: • We maintain a documented incident response plan • Affected users will be notified as required by applicable law • We will take steps to contain and remediate any breach • Post-incident reviews are conducted to reduce recurrence risk

If you discover a security vulnerability in AIMaker Studio, we encourage responsible disclosure. Please report security issues to: security@aimakerstudio.net We will acknowledge receipt of good-faith reports and work to address confirmed vulnerabilities. We ask that you do not publicly disclose vulnerabilities until we have had a reasonable opportunity to address them.

This Security page is provided by BeMel Productions LLC, Georgia, United States. Related legal rights and obligations are governed by the laws of the State of Georgia, United States, except where mandatory local law provides otherwise.

For security-related inquiries, contact: security@aimakerstudio.net BeMel Productions LLC Georgia, United States