Your Data Fortress — Our Highest Priority
Rakb applies multiple defensive controls from the request layer through the database to protect company and student data.
Rakb Security Pillars
Secure Transport & Secret Handling
The platform runs over HTTPS. Service keys and sensitive secrets stay within server boundaries, with sensitive values stored in encrypted form.
Full Data Isolation (RLS)
Row Level Security is enabled on more than 40 tables, with privileged server reads constrained by company, driver, and trip identifiers.
Revocable Sessions
Driver sessions use HttpOnly cookies and can be revoked individually. Requests are rejected after revocation or token expiry.
Sensitive-Operation Audit Trail
Sensitive administrative and operational actions are recorded with company, actor, and affected entity for later review.
CSRF & XSS Protection
State-changing requests validate their origin, while CSP, secure browser headers, and input schemas reduce common web attack paths.
Atomic Operations & Database Constraints
Critical booking, boarding, alighting, and state transitions use transactions and constraints to prevent duplicates and partial writes.
Technical Infrastructure
Rakb is built on cutting-edge cloud technologies for maximum performance and security
Supabase + PostgreSQL
Fully managed PostgreSQL database with built-in RLS and secure APIs. High performance and scalability.
Vercel Edge Network
Hosted on Vercel's global network — blazing fast loading from the nearest edge location. Built-in DDoS protection.
Secure API Keys
Secret keys stay server-side; only keys explicitly designed to be publishable reach the browser when required.
Error Monitoring & Diagnostics
Application error monitoring plus server and database logs support incident detection and diagnosis without exposing secrets.
Implemented, Verifiable Controls
- ✓Tenant isolation through RLS with repeatable privilege tests
- ✓Internal functions and tables restricted to service_role where needed
- ✓Webhook signature verification and server-side secret boundaries
- ✓CSRF, CSP, and security headers on application responses
- ✓Versioned database migrations and atomic tests for critical workflows