1import{j as e,aC as a,C as i,L as n,h as r,E as o,aB as c,o as l}from"./vendor-ui-CKm7ZMyW.js";import{L as d}from"./vendor-react-BcgnEh9s.js";import{S as m}from"./SEO-BnpntjxQ.js";import{P as u}from"./PublicLayout-boyxwr7L.js";import"./InteretailGroupFooter-B8W_LH-m.js";const x=[{icon:a,title:"Two-Factor Authentication",desc:"TOTP-based 2FA shared across all products. Set up once, protected everywhere. Rate-limited to prevent brute force."},{icon:i,title:"Session Timeout",desc:"Bank-style 15-minute inactivity timeout with 60-second warning. Automatic sign-out protects unattended sessions."},{icon:n,title:"Encryption",desc:"AES-256 encryption at rest, TLS 1.3 in transit. TOTP secrets encrypted. Payment data never touches our servers (Stripe handles it)."},{icon:r,title:"Role-Based Access",desc:"Granular permissions: owner, admin, member, viewer. Role hierarchy prevents privilege escalation. Invites restricted by role level."},{icon:o,title:"Audit Logging",desc:"Complete audit trail of authentication events, subscription changes, and admin actions. Ecosystem-wide compliance monitoring."},{icon:c,title:"Infrastructure Security",desc:"Google Cloud Run with non-root containers. Secrets in Google Secret Manager. Helmet security headers. Global rate limiting."}];function j(){const s={"@context":"https://schema.org","@type":"FAQPage",mainEntity:[{"@type":"Question",name:"How does MyAndGo protect my account?",acceptedAnswer:{"@type":"Answer",text:"MyAndGo uses Firebase Auth for identity, optional TOTP-based 2FA, bank-style session timeouts, role-based access control, and rate limiting on all sensitive endpoints."}},{"@type":"Question",name:"Where is my data stored?",acceptedAnswer:{"@type":"Answer",text:"All data is stored in Google Cloud's Sydney region (australia-southeast1). See our Australian Data Residency page for details."}},{"@type":"Question",name:"Does MyAndGo store credit card details?",acceptedAnswer:{"@type":"Answer",text:"No. All payment processing is handled by Stripe. Card numbers, CVVs, and expiry dates never touch our servers."}},{"@type":"Question",name:"Has MyAndGo been security audited?",acceptedAnswer:{"@type":"Answer",text:"Yes. MyAndGo undergoes regular security audits covering authentication, authorisation, input validation, secrets management, rate limiting, and infrastructure configuration."}}]};return e.jsxs(u,{children:[e.jsx(m,{title:"Security",description:"Bank-grade security for your business. 2FA, encryption, session timeouts, role-based access, and Australian data residency. Regularly audited.",path:"/security"}),e.jsx("script",{type:"application/ld+json",dangerouslySetInnerHTML:{__html:JSON.stringify(s)}}),e.jsx("section",{className:"py-16 sm:py-24 px-4 bg-gradient-to-br from-slate-900 to-slate-800",children:e.jsxs("div",{className:"max-w-4xl mx-auto text-center",children:[e.jsx("span",{className:"inline-block bg-[#0097b2]/20 text-[#0097b2] px-4 py-1 rounded-full text-sm font-medium mb-6",children:"Security"}),e.jsx("h1",{className:"text-4xl sm:text-5xl font-bold text-white tracking-tight mb-4",children:"Security you can trust"}),e.jsx("p",{className:"text-xl text-slate-300 max-w-2xl mx-auto",children:"Bank-grade security across every product in the ecosystem. Your data, your control."})]})}),e.jsx("section",{className:"py-16 px-4",children:e.jsx("div",{className:"max-w-4xl mx-auto grid sm:grid-cols-2 lg:grid-cols-3 gap-6",children:x.map(t=>e.jsxs("div",{className:"rounded-xl border border-slate-200 p-6",children:[e.jsx("div",{className:"flex h-10 w-10 items-center justify-center rounded-lg bg-[#0097b2]/10 mb-4",children:e.jsx(t.icon,{className:"h-5 w-5 text-[#0097b2]"})}),e.jsx("h3",{className:"text-sm font-semibold text-slate-900 mb-2",children:t.title}),e.jsx("p",{className:"text-sm text-slate-500",children:t.desc})]},t.title))})}),e.jsx("section",{className:"py-16 px-4 bg-slate-50",children:e.jsxs("div",{className:"max-w-3xl mx-auto",children:[e.jsx("h2",{className:"text-2xl font-bold text-slate-900 mb-8",children:"Security FAQ"}),e.jsx("div",{className:"space-y-4",children:s.mainEntity.map(t=>e.jsxs("div",{className:"rounded-xl border border-slate-200 bg-white p-5",children:[e.jsx("h3",{className:"text-sm font-semibold text-slate-900 mb-2",children:t.name}),e.jsx("p",{className:"text-sm text-slate-600",children:t.acceptedA
1nswer.text})]},t.name))})]})}),e.jsx("section",{className:"py-16 px-4 bg-[#0097b2]",children:e.jsxs("div",{className:"max-w-4xl mx-auto text-center",children:[e.jsx("h2",{className:"text-3xl font-bold text-white mb-4",children:"Secure by default"}),e.jsx("p",{className:"text-lg text-white/80 mb-8",children:"Every account is protected from day one. No security add-ons required."}),e.jsxs(d,{to:"/login",className:"inline-flex items-center gap-2 rounded-lg bg-white px-8 py-3 text-sm font-medium text-[#0097b2] hover:bg-slate-100 transition",children:["Get Started ",e.jsx(l,{className:"h-4 w-4"})]})]})})]})}export{j as SecurityPage};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.