Security
How we protect accounts, payments, and member data — stated plainly, without certification badges we do not have.
We are not certified yet.
We do not display SOC 2, ISO 27001, PCI, or similar badges. We will not show those marks until we have a current report that justifies them.
This page describes practices we use today — not a third-party audit claim.
Payments
- Stripe Checkout processes membership payments. Card details go to Stripe, not to our servers.
- We store subscription and customer references from Stripe so membership access stays in sync. We do not store full card numbers.
- Stripe webhook events are checked with Stripe’s signing secret before we update membership records.
Accounts and member access
- Member sign-in uses Supabase Auth (email and password sessions).
- Routes under
/membersrequire a signed-in user. Visitors without a session are sent to login. - Admin tools under
/members/adminrequire an admin role and authenticator MFA for that session. - Sensitive admin actions are written to an internal audit log.
- Member-area responses are set not to be stored in public caches.
Hosting and data
- The site and membership app run on Vercel over HTTPS (encrypted in transit).
- Application data lives in Supabase (Postgres, auth, and storage for member content).
- API keys and secrets stay in server environment variables — not in public frontend code.
- The membership app sends basic browser security headers (for example, blocking framing and MIME sniffing).
Subprocessors
These companies process data on our behalf. Full privacy detail is on our Privacy Policy.
| Provider | Role | More info |
|---|---|---|
| Supabase | Database, authentication, and file storage | Privacy |
| Vercel | Website and membership app hosting | Privacy |
| Stripe | Payment processing and subscription billing | Privacy |
| Google Analytics | Site analytics (only if you accept analytics cookies) | Privacy |
Report a vulnerability
Email security@theafricanmanpodcast.com for security issues or suspected vulnerabilities. Include steps to reproduce, affected URLs or accounts (no passwords), and your contact details. Please give us a reasonable chance to fix the issue before public disclosure.
For account help, billing, or general questions, use admin@theafricanmanpodcast.com or the contact form.
What we ask of you
- Use a strong, unique password for your account.
- Sign in with the same email you used at checkout so your membership can link correctly.
- Tell us if you see unexpected charges or cannot access a paid membership.
Last updated: July 20, 2026