Security

Masonic Memory uses technical and organisational measures to protect user accounts and training data.

1. Account protection

We use email confirmation, password handling, and Cloudflare Turnstile where used to protect accounts.

2. Role-based access

Access should be limited by role: member, province admin, master admin.

3. Data access

Users should only access data needed for their role.

4. Admin controls

Admin access should be limited and reviewed.

5. Supabase security

Database access should be protected by Supabase Auth and Row Level Security where configured.

6. Transport security

All data is transmitted over securely encrypted HTTPS connections.

7. Incident handling

Suspected data incidents should be reviewed and logged.

8. User responsibilities

Users should:

• use strong passwords
• not share login details
• log out on shared devices
• report suspicious activity

9. Report a concern

Please refer to our Contact page.