Layered protection
ProHarbor uses server-side authorization, restricted database access, private storage, short-lived file links, secure cookies, application-layer encryption for sensitive customer request data, rate limits, and audited administrative actions. Access is checked again when sensitive data is requested.
Marketplace boundaries
Opportunity previews omit customer contact details. Customer information is released only after an authorized lead unlock. Professional businesses cannot use their session to read competitor purchases, quotes, or conversations. Verification evidence remains private, and pending verification does not produce a public badge.
Responsible reporting
Do not test live systems or access data without written authorization. If you believe you found a security problem, review the Acceptable Use Policy and use the contact page to request a safe reporting channel. Avoid including private customer data in an initial report.
No absolute guarantee
Security is an ongoing process, and no service can guarantee complete protection. ProHarbor reviews access boundaries and production configuration as the platform evolves.