Security Infrastructure

1. Security Overview

At Zentra AI, security is integrated into every AI solution, custom dashboard, database schema, and automation workflow we build. We deploy robust safeguards to ensure client data remains private, systems remain online, and credential flows are locked.

2. Data Protection & Encryption

We protect database records and client interactions through industry-standard encryption practices:

• Encryption in Transit: All web traffic to and from Zentra AI dashboard endpoints is forced over Secure Sockets Layer (SSL/TLS 1.3) protocols.
• Encryption at Rest: MongoDB databases are encrypted using AES-256 protocols. Customer details, credentials, and tokens are protected from physical disk exposures.
• Salted Password Hashing: We never store plain text passwords. User passwords are salted and hashed using cryptographically secure `bcrypt` algorithms.

3. Access Controls & OAuth

Access rules to dashboards, clouds, and integration settings are structured on strict authentication models:

• OAuth 2.0 Integration: By utilizing Google Identity Services (OAuth 2.0), we verify identities directly through Google. This keeps password management isolated from our servers for users logging in via Google.
• HTTP-Only Cookies: Authentication tokens (JWT) are stored in secure, `httpOnly`, `sameSite: "lax"`, and `secure` browser cookies. This defends sessions against Cross-Site Scripting (XSS) and Session Hijacking.
• Key Rotation: JWT secrets and API integration keys are rotated periodically and isolated from source code repositories using Next.js environment configurations.

4. Workflow & Automation Security (n8n)

When hosting, deploying, or developing n8n automation pipelines for client businesses, we maintain rigorous isolation boundaries:

• Credential Isolation: Service keys, webhooks, and third-party credential vaults in n8n are stored inside isolated database structures with localized environment keys.
• Sandbox Executions: Custom scripts and node executions in workflows are restricted from root access to prevent host server vulnerabilities.
• Webhook Signatures: External requests to n8n webhook nodes are verified using secure signature keys to prevent spoofing or unauthorized triggers.

5. Vulnerability Disclosures

We welcome reporting of potential vulnerabilities. If you identify a security issue in our portfolio or client systems built by Zentra AI, please coordinate the disclosure responsibly by emailing us directly. We will review all submissions and address vulnerabilities promptly.