Security

Logomann uses Cloudflare Workers, D1, R2, KV, Queues, Durable Objects and Vectorize for application infrastructure.

Passwords are stored as salted PBKDF2-derived hashes. API keys and session tokens are stored as hashes rather than plaintext.

Generated assets are served through authenticated, short-lived signed URLs. Access checks verify both the authenticated account and the asset owner.

Payment card data is handled by Stripe. Logomann does not store full card numbers.

This page describes the intended application controls. Production credentials, Cloudflare account configuration and provider settings must be maintained separately from source control.