Security Overview & Protections
Our engineering standards for safeguarding customer accounts, API tokens, and B2B research data.
Server-Side Credential & Secret Isolation
All third-party API keys (XMagnet, Hunter, ZeroBounce) and database connection strings are stored exclusively in secure server-side environment variables and are never transmitted to client browsers.
Encryption in Transit & Rest
All application traffic is enforced over TLS 1.3 encryption. Passwords and credentials are cryptographically protected with salted hashing.
Server-Enforced Access & Credit Controls
Credit deductions and export authorizations are computed and validated exclusively on the server. The application rejects client-tampered credit amounts and enforces strict user tenancy.
Sanitized Upload & Export Safeguards
Imported CSV files are strictly parsed and sanitized against formula injection (CSV injection). Export files are generated with full escaping and bound to authenticated user sessions.
Vulnerability Reporting
If you identify a potential security vulnerability within LeadIntellect services, please contact our security team directly at security@leadintellect.ai. We acknowledge responsible disclosure reports promptly.