Security

Security at VICE Auctions

We take security seriously. Our platform is built with security-first principles to protect your data, transactions, and identity.

Security Features

Encryption at Rest

All data is encrypted using AES-256 encryption. Database backups are encrypted and stored in geographically distributed locations.

Encryption in Transit

All communications use TLS 1.3. We enforce HSTS and certificate transparency for all domains.

Authentication

Supabase Auth with JWT tokens, optional 2FA/MFA, OAuth providers (Google, GitHub, Apple), and API key rotation.

Fraud Detection

AI-powered fraud detection via CLAWS integration, device fingerprinting, and behavioral analysis.

Infrastructure

Hosted on Vercel with automatic DDoS protection, WAF, and edge caching. Database on Supabase with RLS policies.

Monitoring

24/7 security monitoring, anomaly detection, and automated incident response. Regular penetration testing.

Compliance & Certifications

PCI DSS

Payment processing via Stripe

compliant

GDPR

EU data protection

compliant

CCPA

California privacy

compliant

SOC 2 Type II

Service organization controls

in-progress

ISO 27001

Information security management

planned

Vulnerability Disclosure

Report a Security Vulnerability

If you discover a security vulnerability, please report it responsibly. We appreciate your help in keeping VICE Auctions secure.

  • Email: security@vice.platphormnews.com
  • PGP Key: Available on request
  • Response Time: Within 24 hours

We do not pursue legal action against security researchers who follow responsible disclosure practices.

User Security Best Practices

  • Use a strong, unique password for your VICE account
  • Enable two-factor authentication (2FA) when available
  • Never share your password or API keys
  • Verify seller identities before large purchases
  • Report suspicious listings or messages immediately
  • Keep your email and phone number up to date
  • Review your account activity regularly

Questions about security?

Contact our security team for any concerns or questions.

Contact Security Team