Security & Infrastructure

1. Core Security Philosophy

GuideTennis OS is engineered with a security-first, offline-resilient architecture. From real-time courtside match scoring to enterprise academy management, we safeguard your data using industry-standard cryptography, multi-tenant isolation, and strict access controls.

2. Data Encryption (In Transit & At Rest)

• Encryption in Transit: All web, mobile, and gRPC/ConnectRPC traffic is encrypted using modern TLS 1.3 with Perfect Forward Secrecy (PFS).
• Encryption at Rest: Database records, match point telemetry, and user profiles are stored in encrypted PostgreSQL volumes using AES-256 encryption.
• Mobile Key Storage: Mobile session tokens and JWT credentials are stored securely in hardware-backed enclaves via expo-secure-store (iOS Keychain & Android KeyStore).

3. Authentication & Role-Based Access Control (RBAC)

Authentication is managed via a zero-trust architecture powered by Better Auth with cryptographically salted Argon2 password hashing. Our system strictly enforces RBAC policies separating Player, Coach, and Academy Administrator data boundaries.

4. Video Processing & Biometrics Privacy

Video recordings submitted for AI stroke biomechanics analysis are processed through secure, ephemeral processing pipelines. Extracted 17-keypoint skeletal telemetry data is anonymized and linked solely to the authenticated player profile.

5. Vulnerability Disclosure & Bug Bounty

We welcome security researchers to inspect our platform. If you discover a potential vulnerability, please report it responsibly to our security engineering team at: security@guidetennis.com.