SeraCase Trust Center
Infrastructure
Cloud application posture for a modern Next.js + Supabase deployment.
Application
SeraCase runs as a Next.js application with authenticated API routes, security headers, and environment-based secrets (no hardcoded keys in source).
Database
Postgres is provided via Supabase with Row-Level Security policies on user data tables and least-privilege patterns for service-role operations.
Object storage
Case documents, evidence, exports, and quarantine objects use private buckets. Public anonymous read of case files is not enabled.
Secrets
Encryption master keys, service role keys, and API credentials are supplied through environment configuration on the host (for example Vercel).