Security

Security and payment handling

Fillfolio uses hosted payment and authentication providers so sensitive credentials and card data are handled by specialized systems.

Payments

Stripe-hosted Checkout and the Stripe Customer Portal handle subscription payments and billing management. Fillfolio does not store full payment card numbers.

Authentication

Clerk provides sign-in, sign-up, and account-session controls. Private beta dashboard access is protected server-side with an allowlist.

Infrastructure

Fillfolio uses HTTPS, Cloudflare infrastructure, and D1-backed persistence through a private Worker API. Production secrets are kept out of the public repository.

Report an issue

If you believe you found a security issue, email [email protected] with enough detail to help us reproduce and investigate it.