Security.
Without invented certainty.
Current scope
Mercenta is a pre-launch application. This page describes the controls and boundaries currently documented in the product. It is not a certification, audit report, service-level commitment or guarantee of future availability.
Authentication and authorization
Workspace authentication uses wallet signatures with short-lived, single-use nonces and session cookies. Authentication does not grant payment or transaction-signing authority. Spending actions remain subject to the product's policy checks and explicit authorization flow.
Wallet boundary
Any local wallet-vault encryption described in the interface applies to that browser-side wallet feature only. Mercenta cannot recover a locally generated wallet after browser data is cleared without a user-held backup. Do not submit seed phrases, private keys, passwords or purchased credentials to support.
Operational limitations
The public status surface currently provides an on-demand endpoint check. Module telemetry, historical uptime, chain monitoring and a live incident feed are not connected. Demonstration incidents and illustrative receipts must not be interpreted as operational evidence.
Assurance and certifications
No SOC 2, ISO 27001, HIPAA, PCI or similar certification is claimed on this page. No penetration-test report or independent assurance report is currently published here. Contact us if you need a written answer about a specific control before using the product.
Report a vulnerability
Please report suspected security issues privately to [email protected] with the subject “Security report”. Include the affected route or feature, reproduction details that do not expose secrets, and a safe way to follow up. Do not include private keys, seed phrases, passwords, access tokens or customer data.
We will review reports manually. This mailbox is not a promise of a bounty, response-time SLA, or acceptance of unsolicited testing that could affect availability or other users.
Related information
Read the privacy and storage notice, read the terms and storage notice, inspect current status coverage or open the help centre.