Security at BevGenie
At ConsumerIQ, protecting customer data is fundamental to how we build and operate BevGenie. Security is integrated throughout our software development lifecycle, cloud infrastructure, and operational processes.
Although no system can guarantee absolute security, we employ industry-standard administrative, technical, and organizational safeguards designed to protect customer information.
Secure Infrastructure
BevGenie is hosted on modern cloud infrastructure selected for reliability, scalability, and security.
Our primary infrastructure providers currently include:
Provider
Purpose
Vercel
Application hosting and deployment
Supabase
Authentication, PostgreSQL database, vector storage
Amazon S3
Customer file ingestion and secure storage
Anthropic
AI inference
Voyage AI
Text embeddings supporting semantic search (when enabled)
Stripe
Billing and subscription processing
Resend
Transactional email delivery
Google Analytics
Website analytics (when enabled)
Authentication
BevGenie uses Supabase Authentication with secure JWT-based session management.
Authentication includes:
Secure password authentication
Encrypted session cookies
Session expiration
Secure password reset workflows
Email verification
Encryption
All communications between users and BevGenie are encrypted using TLS.
Customer information stored within supported cloud providers is encrypted at rest using provider-managed encryption technologies.
Customer Data Isolation
Customer information is logically isolated.
Customer Content is never intentionally exposed to other organizations using BevGenie.
Access to customer information is limited to authorized personnel with a legitimate operational need.
Access Controls
ConsumerIQ follows least-privilege principles.
Administrative access is limited and protected through authentication controls.
Monitoring
We continuously monitor platform health, reliability, and security events.
Monitoring includes:
authentication events
application errors
infrastructure availability
operational logs
Backups & Recovery
Critical application data is backed up according to our operational procedures.
Recovery processes are periodically reviewed to help ensure business continuity.
Vulnerability Management
Security issues are prioritized according to severity.
We regularly update infrastructure and dependencies to address known vulnerabilities.
Responsible Disclosure
If you believe you have identified a security vulnerability, please contact:
security@consumeriq.ai
Please do not publicly disclose security vulnerabilities until we have had an opportunity to investigate and address them.