Back to Home

Security & Protection

Cryptographic Safety Stack

1. Infrastructure Security

TruWaiver is hosted on Vercel and Firebase's multi-zone global server infrastructure, featuring automated DDoS mitigation, web application firewalls (WAF), and standard SOC-1/2/3 data centers.

2. Cryptographic Signatures

Every completed waiver is compiled into an un-editable PDF format. When finalized, the signature image, date coordinates, and browser metadata are combined to produce a unique document hash ID. This hash prevents silent retro-active edits to waiver terms, ensuring court admissibility.

3. API Security

All backend endpoints (Stripe payments, export-proof-bundles, and waiver creation) check authorization cookies using cryptographically validated Firebase tokens, blocking unauthorized cross-origin requests.

TRUWAIVER DATA CORE ยท SECURITY AUDITED