Security & Responsible Disclosure

1. 1. Scope

   FairFiles Hub is a consumer education and self-help technology platform owned and operated by Credit Score Defenders LLC in New York. It provides consumer education, local evidence-organization tools, and document-preparation assistance. FairFiles Hub is not a law firm and does not provide legal representation. Legal notices may be sent to legal@fairfilehub.com.

   This notice describes implemented application controls and their limits. It does not claim an external certification or independent security attestation.

2. 2. Local Vault Controls

   • AES-256-GCM authenticated encryption through the browser Web Crypto API.
   • A unique cryptographically random IV for each encryption operation and a unique vault salt.
   • PBKDF2-HMAC-SHA-256 password derivation with versioned parameters.
   • SHA-256 file integrity values stored inside the encrypted manifest.
   • Passwords and cryptographic keys remain in browser memory and are cleared when the vault locks.
   • Configurable inactivity locking and authenticated decryption that fails when ciphertext is modified.
   • No administrator recovery key or encryption bypass.

3. 3. Storage and Browser Permissions

   On supported browsers in a secure HTTPS context, members explicitly choose and authorize a computer folder, external drive, mounted network location, or user-controlled synced folder. The application does not silently choose a destination. Unsupported browsers use an encrypted-download fallback and the device’s Save, Share, or Files interface.

4. 4. Connection and Account Security

   The application uses an HTTPS/TLS connection when the live runtime reports a secure context. Base44 provides authentication and hosting infrastructure. Platform-level MFA, monitoring, scanning, certification, and penetration-testing claims are not made unless separately evidenced and approved.

5. 5. Important Limitations

   • FairFiles Hub cannot recover a vault password or inaccessible local files.
   • A cryptographic hash can detect modification but does not automatically establish authenticity, chain of custody, or courtroom admissibility.
   • Browser permissions can expire and may require the member to reconnect storage.
   • No system is fully secure or impossible to compromise.

6. 6. Responsible Disclosure

   Report suspected security issues through the security contact listed below. Do not access another person’s data, expose personal information, or perform destructive testing.

FairFiles Hub provides nationwide U.S. consumer credit and debt education, controlled self-help letter templates, local evidence encryption, financial calculators, complaint worksheets, official-resource links, AI-assisted education, and minimum account controls. It does not analyze uploaded documents, manage a lawsuit, file a dispute or complaint, submit a court document, or act for a user. FairFiles Hub is not a law firm, credit bureau, lender, government agency, or collection agency, does not provide legal representation or professional advice, and does not guarantee any outcome. Non-waivable rights under applicable law remain unaffected.