Security Disclosures & Cryptographic Architecture
Every dollar split on MicroSplit AI is protected by zero-loss deterministic algorithms, cryptographic SHA-256 state chaining, and least-privilege role boundaries.
Zero-Cent Loss Math
Calculations execute strictly in integer minor units (cents) using the largest-remainder method (Hare-Niemeyer quota). The sum of payouts equals 100% of the allocated pool with 0.00 remainder.
Immutable SHA-256 Ledger
Every state transition links back to the preceding block hash. Any post-hoc tampering breaks the cryptographic chain and triggers an immediate verification alert.
HTTP Security Headers & Defenses
Our edge infrastructure enforces modern browser protections on every single request:
- HSTS: max-age=63072000; includeSubDomains; preload
- X-Frame-Options: DENY (Clickjacking mitigation)
- X-Content-Type-Options: nosniff (MIME sniffing defense)
- Referrer-Policy: strict-origin-when-cross-origin
- Permissions-Policy: camera=(), microphone=(), geolocation=()
- Sliding-window IP rate limiting: Active on all mutation APIs
Responsible Disclosure Program
If you discover a security vulnerability, we encourage you to report it to our engineering team at security@microsplit.ai. We acknowledge all legitimate reports within 24 hours and do not pursue legal action against researchers acting in good faith.