Security
How Jerp handles your data, and how to tell us when something looks wrong.
How data is protected
- Database connections use TLS with full certificate verification
- Dashboard sessions are signed, expire after seven days, and are stored server-side
- Secrets and tokens are redacted from logs
- Payment details never reach Jerp; Stripe handles them
Access
The dashboard only shows servers where your Discord account has Manage Server permission, and that permission is re-checked on every request rather than only at login.
Reporting a vulnerability
Report privately in the support server rather than publicly, and include steps to reproduce. We will confirm receipt and keep you updated.