Launch Checklist
Security Basics Every Platform Needs
A practical baseline for authentication, permissions, infrastructure, privacy, monitoring and user-controlled deletion.
01
Identity and sessions
- Email verification
- Strong password controls
- Secure password reset
- Rate limits and abuse protection
- Optional Apple and Google sign-in
02
Data and permissions
- Least-privilege access
- Private database networking
- Encryption in transit
- Backups and restore testing
- Retention rules
03
Infrastructure
- Protected secrets
- Restricted origin access
- Separate environments
- Dependency patching
- Centralised logs
04
User control
- Privacy explanation
- Delete account and data
- Revoke third-party tokens
- Minimal legal retention
- Clear support route
Use the full launch checklist
This page is an educational summary, not a replacement for a professional security review.
Download checklist ↓