DATABASE_URLmust never be committed. Use.env(git-ignored) locally and a secrets manager in deployed environments.- This schema stores no raw payment card data and minimizes identifying information for
Beneficiaryrecords — see README for details. - Report vulnerabilities per the organization SECURITY.md.