Daily Operational Security Baseline

Daily operations follow a baseline for lock screen, password complexity, MFA where supported, clean desk, and credential handling.

Status: Published

Last reviewed: June 21, 2026

Owner: Leo Infinity product owner

Text to paste

Answer: Yes

Yes. Leo Infinity maintains a daily operational security baseline requiring screen lock, strong passwords, MFA where supported by providers, clean-desk handling of seller data, protected environment variables for secrets, and restricted administrator access. Evidence: https://app.leo.com.vc/seguranca/daily-security-baseline

Policy controls

Administrator accounts must use strong passwords and MFA when the provider supports it.
Production secrets are kept in environment-variable stores rather than source code.
Screens must be locked when unattended and protected data must not be left visible in shared environments.
Only the minimum data necessary for support or operation should be viewed or exported.

Evidence notes

Security baseline is published and mapped to TikTok's questionnaire.
The app uses authenticated sessions and server-side authorization checks.
Sensitive marketplace tokens are handled server-side.