Security
Last updated: June 11, 2026
Security is foundational to a marketplace handling confidential business and financial information. This page summarizes the controls ForwardOS applies to protect your data.
1. Data Encryption
All traffic is served over HTTPS/TLS. Data is encrypted in transit, and sensitive data is encrypted at rest by our database provider.
2. Authentication
Passwords are hashed with bcrypt (never stored in plaintext). Sessions use signed, httpOnly cookies. We support email verification and are rolling out optional two-factor authentication.
3. Access Control
Role-based access separates buyer, seller, broker, and admin capabilities. Administrative actions (e.g., listing and account approvals) require an authenticated admin session and are audit-logged.
4. Data Rooms
Confidential documents are shared through access-controlled data rooms with NDA gating, per-user permissions, and access tracking.
5. Infrastructure
We host on managed, SOC-2-aligned cloud infrastructure with network isolation, automated backups, and continuous monitoring.
6. Vulnerability Management
We apply dependency updates, server-side input validation, rate limiting, and security headers. We welcome responsible disclosure of vulnerabilities.
7. Reporting a Vulnerability
If you believe you have found a security issue, please email security@forwardos.ai. We aim to acknowledge reports within two business days.