Security Requirements | Sharethrift Docs

📄️ 0001 Identity Verification

Identity verification is required for access to advanced account tiers (e.g., Verified Plus, Business)

Uploaded files must be scanned for malware before being accepted onto the platform

Admins must be able to block/unblock users and listings to moderate abuse or violations

Blocked listings must be appealed and reviewed before being reinstated

All user-generated listings and profile content must be auto reviewed and not allowed to list if doesn't pass review

No financial or sensitive PII data (e.g., SSNs, payment info) may be stored on the platform

Access to admin-only routes must be restricted via role-based access control

Blocked users must not be able to take actions such as messaging, reserving, or publishing

Reservation requests must be mutually closed and cannot be auto-confirmed without both users

All data in transit must be encrypted using TLS 1.2 or higher

All user inputs must be validated and sanitized before processing