Security

Infrastructure

AdvertisingAPI runs on Cloudflare's global edge network. All traffic is served through Cloudflare's security infrastructure, which provides DDoS protection, bot mitigation, and WAF rules. Our compute runs on Cloudflare Workers with V8 isolate sandboxing — each request runs in its own isolated environment.

• ✓ Cloudflare edge network (300+ cities worldwide)
• ✓ DDoS protection and WAF
• ✓ V8 isolate sandboxing per request
• ✓ No shared server infrastructure

Data encryption

All data in transit is encrypted with TLS 1.3. Passwords are hashed with SHA-256 before storage. API keys are stored as one-way hashes — we never store plaintext credentials. Database storage uses Cloudflare D1 with encryption at rest.

• ✓ TLS 1.3 for all connections
• ✓ Hashed password storage
• ✓ One-way API key hashing
• ✓ Encryption at rest

Authentication & access control

API access requires JWT bearer tokens that expire after 7 days. All API requests are authenticated and authorized against the requesting account. Audit logs record every action taken on the platform, including IP address and user agent.

• ✓ JWT authentication with expiry
• ✓ Per-account authorization
• ✓ Full audit logging
• ✓ Rate limiting

Audience data

Audience targeting uses SHA-256 hashed email addresses. We never store or transmit plaintext email addresses for audience matching. Hashed audience data is isolated per account and cannot be accessed by other accounts.

Compliance

We are committed to meeting industry compliance standards. Our current focus areas:

• → GDPR awareness — we process data on Cloudflare's EU-capable infrastructure
• → CCPA — we do not sell personal information
• → IAB TCF compliance for exchange integrations