Trust
Security
How TrendzityX approaches authentication, API keys, webhooks, data protection and responsible disclosure.
Authentication
Developers sign in to the console with email and password. Wallet-based sign-in is coming soon. We never ask for or store wallet private keys or seed phrases.
API keys and webhooks (sandbox)
Sandbox secret keys are generated on the server, shown once and stored only as a SHA-256 hash. Each key is scoped to one application and organization, rate limited and revocable. Webhook events are signed with HMAC-SHA256 so you can verify they came from TrendzityX. These features are in development.
Certifications
TrendzityX does not currently hold SOC 2, ISO 27001, PCI DSS or any regulatory licence or approval.
Data access controls
Account data is protected with row-level access rules, and administrative actions are checked on the server against a separate roles table.
Production keys (planned)
Production keys, key rotation and scoped permissions will ship with production activation.
Monitoring and incident response
We monitor errors and unusual activity and will notify affected customers of any security incident.
Responsible disclosure
Found a vulnerability? Contact our team via Contact our team with details. Please give us reasonable time to fix it before disclosing publicly.