2 Commits

Author SHA1 Message Date
metatroncubeswdev
752845302a Check DATA_ENCRYPTION_KEY at startup; launch skill: bad key broke order analytics (review 2.1.1)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 22:35:24 -04:00
metatroncubeswdev
38c03cd1ae Encrypt order data at rest; add terms of service with data processing terms
Protected customer data (Level 1): order ids are stored as keyed HMACs, order numbers
and ids for admin links as AES-256-GCM ciphertext (DATA_ENCRYPTION_KEY). New public
/terms page with processor terms; privacy policy links to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 10:29:48 -04:00