Contact
Leo-AI · Legal & Policies

Security Policy

Official documentation and governance standards for the Leo-AI platform (Leo Beta Release).

Updated Nov 8, 2026 Open Leo-AI Lab

1. Our Commitment to Security

At Leo-AI, safeguarding your source code, credentials, and workspace data is foundational to how we engineer our platform.

2. Infrastructure & Encryption

  • Encryption in Transit: All traffic between your browser, the Leo-AI studio, and AI model endpoints is encrypted using modern HTTPS / TLS 1.3.
  • Encryption at Rest: Connected third-party tokens (such as GitHub OAuth tokens, Supabase credentials, and custom provider API keys) are encrypted using AES-256 encryption before storage.
  • Isolated Preview Sandboxes: Live application previews execute inside isolated browser sandboxes with strict Cross-Origin Opener and Embedder Policies (COOP/COEP).

3. Account Protection

Leo-AI supports Two-Factor Authentication (2FA / TOTP) with recovery codes, rate-limited authentication endpoints, and session management across all accounts.

4. Vulnerability Reporting

If you discover a potential security vulnerability on Leo-AI, please report it responsibly via our Contact Page so our engineering team can investigate and remediate it promptly.