Security

SSL/TLS Encryption

Every connection to www.printbridge.com.au is encrypted with industry-standard TLS (Transport Layer Security). This means all data transmitted between your browser and our servers — including personal details, login credentials, and file uploads — is encrypted in transit and protected from interception.

PCI-Compliant Payments

We use Stripe to process all payments. Stripe is a PCI DSS Level 1 certified payment provider — the highest level of certification in the payment card industry. Your credit card details are sent directly to Stripe's secure servers and are never stored on PrintBridge infrastructure.

This means even in the unlikely event of a breach on our side, your payment card information would not be compromised.

Secure Authentication

User accounts are protected by our authentication system, which employs:

• Passwords hashed using industry-standard algorithms (never stored in plain text).
• Secure session management with HttpOnly, Secure, and SameSite cookie flags.
• CSRF (Cross-Site Request Forgery) protection on all forms and API endpoints.
• Rate limiting on login endpoints to prevent brute-force attacks.

Data Storage & Access Control

Sensitive data at rest is encrypted. Access to production systems and customer data is restricted to authorised personnel only, following the principle of least privilege.

• Database access is restricted and audited.
• Design files are stored in encrypted, access-controlled storage.
• Administrative access requires multi-factor authentication and is logged for audit purposes.

Design File Security

Your design files are your intellectual property. We take the following measures to protect them:

• Files are uploaded over encrypted connections (TLS).
• Files are stored in access-controlled storage with encryption at rest.
• Design files are shared only with the specific print supplier assigned to your order and are not accessible to other customers or third parties.
• You can request deletion of your design files at any time via your account settings or by contacting support.

Infrastructure Security

Our hosting infrastructure is configured with security best practices:

• Firewalls and network segmentation to limit attack surface.
• Regular software updates and security patches.
• Containerised application deployment for isolation.
• Automated backups with encrypted off-site storage.
• Monitoring and alerting for suspicious activity.

Responsible Disclosure

If you discover a security vulnerability on our website or systems, we encourage you to report it responsibly. Please email security@printbridge.com.au with details of the issue. We will investigate promptly and work with you to resolve it. We ask that you do not publicly disclose the vulnerability until we have had a reasonable opportunity to address it.