Security Policy
Last Updated: August 29, 2026
Secure Transport
All data payloads are transmitted using TLS/SSL protocols with strong cipher suites.
Payment Safety
PCI-DSS Level 1 compliant transactions integrated natively via Razorpay gateway.
Access Control
Technician roles are isolated via cryptographically signed JWT tokens.
1. Data Security & Encryption
All network interactions with the TechBes API are protected using HTTPS (Secure Hypertext Transfer Protocol). Customer details, phone verification numbers, address logs, and technician locations are encrypted at rest and in transit.
2. Financial Integrity & Payments
TechBes does not store raw credit/debit card numbers, UPI PINs, or net banking passwords. Payment checkouts are tokenized and processed through Razorpay's secure SDK. Payment verification employs cryptographic signatures generated server-side.
3. User Authentication Security
User accounts utilize JSON Web Tokens (JWT) for secure session persistence. Mobile phone verification uses one-time passwords (OTP) generated server-side with a strict 5-minute expiration period. Debugging variables or raw OTPs are never rendered in client application logs.
4. Infrastructure Security
Database connection strings, Twilio authentication tokens, SMTP server credentials, and API private keys are stored securely using environment variables on isolated production servers. Git repositories contain only `.env.example` configurations with mock placeholders.
5. Contact Information
To learn more about our security practices, or to report an issue, please contact our security team at lohith@techbes.co.in.