Security

• Artist data is isolated per studio with row-level security in Postgres.
• All public traffic is HTTPS. Production sets HSTS.
• Dashboard, portal, and kiosk routes are disallowed in robots.txt.
• Payments go through the configured merchant processor — we do not store raw card numbers.
• Report issues to contact@djzop.com.