Security & Safety

How we protect your roster, athlete data, and coaching systems

Signed Session Auth

Authentication is handled via secure HTTP-only signed cookies, preventing cross-site scripting (XSS) and token theft.

Database Isolation

Coach rosters and athlete programs are queries with strict tenant key constraints, ensuring complete data isolation between coaches.

Invite Code Authorization

Coach registration is strictly invite-only with cryptographically validated registration keys.

Automated Backups

Real-time transactional logs and automated daily snapshots ensure zero data loss for training programs.

Responsible Disclosure

If you discover a potential vulnerability or security concern in MONOLITH, please report it directly to our security team. We address security reports immediately and respond to disclosures within 24 hours.

security@monolith.coach