Security
How Vinenux protects emergency codes and the information behind them.
Codes
Each child’s emergency code is generated with a cryptographically secure random source over a 10-character alphabet, giving roughly one quadrillion possibilities. Codes are non-sequential and contain no personal information.
Storage
We never store an emergency code in plain text on the lookup path. The service holds only a keyed hash, so a database dump alone does not yield working codes.
Abuse resistance
Requests are rate limited per client and capped service-wide. Repeated failures temporarily block further attempts.
Authorization
Emergency information is never served directly from the database to a browser. Every request passes through a backend that re-checks authentication, guardian approval, expiry and revocation before returning anything.