Security
Current security posture and roadmap items for LandingRoom.
Controls
| Area | Status | Notes |
|---|---|---|
| Encryption at rest | DONE | Cloudflare R2 default encryption is used for file storage. |
| Encryption in transit | DONE | HTTPS is used for data in transit. |
| Authentication | DONE | Better Auth with email and password authentication is in place. |
| Access controls | DONE | Admin and member roles are implemented; more granular RBAC is on the roadmap. |
| Backups | DONE | Nightly automated backups (encrypted, EU-region storage) with 7 daily / 4 weekly / 12 monthly / 7 yearly retention. Restore is a documented manual procedure; automated restore-drill testing is on the roadmap. |
| Incident response | TBD | Documented procedure available on request; final internal process is to be completed. |
| Pen testing | TBD | Independent penetration testing has not yet been completed. |
| SOC 2 | Roadmap | LandingRoom is not yet SOC 2 certified - certification is on the roadmap. |