SECURITY

Category: 04. No-Code / Low-Code
Section: Phase 3: Execution & Quality

10. SECURITY.md

Purpose: To secure user data, API keys, and platform settings in the no-code app.

Act as a security engineer.
Using the System Architecture and Workflow Logic below, create a Security document for a no-code hackathon project.

ARCHITECTURE: [PASTE SYSTEM_ARCHITECTURE]
WORKFLOW_LOGIC: [PASTE WORKFLOW_LOGIC]

Provide:
1. API key protection (Platform vault, Environment variables)
2. Authentication security (Platform-native auth best practices)
3. Input sanitization (Preventing injection through forms)
4. Data privacy (Privacy rules in the database)
5. Database security (Row-level security, permissions)
6. Access control (Who can edit the app?)
7. Privacy rules for user data (Who can see what?)
8. A pre-submission security checklist

Keep the security measures practical and native to the platform.
Easy to implement within a hackathon timeframe.