Security

TLS in transit, encryption at rest at the provider layer, role-based access, Row Level Security, signed media URLs, MFA for staff and clubs, append-only audit logs, and no public player directory.

Report vulnerabilities to security@swaapsports.com. Do not test against production with real youth data.