Audit Security for SaaS Exhibit-Management - RecordLEX

Pre-launch Bubble.io security audit for RecordLEX, a legal exhibit-management SaaS. Audit scope includes Bubble Privacy Rules and database security, authentication and authorization, cross-user/tenant isolation, URL and ID manipulation, backend/API exposure, private video/audio file access, public QR/unique-link access boundaries, Stripe subscription and plan/case-limit access controls, and basic data-loss, performance and scalability risks. Testing will use controlled test accounts and non-sensitive test data. No application, database, workflow, Privacy Rule, or Stripe configuration changes may be made without my prior approval. Deliverable: written security audit report identifying Critical, Important, and Recommended findings with impact and remediation guidance. Fixed project price: $750 USD. Delivery: 3–5 business days after required access and test accounts are provided. Payment: two $375 milestones — $375 to begin the audit and $375 upon completion and delivery of the written audit report. One round of post-fix verification for Critical and Important findings is included in the $750 total. NDA has been executed before access is provided.