ICTY
Security & Compliance
ICTY Platform Security Overview
US Google Sign-In Ready - Partial Compliance
ICTY meets most security requirements for US Google Sign-In integration including SSL encryption, privacy policy, terms of service, and secure authentication.
Action Required for Full Google Compliance
- Verify domain ownership in Google Search Console
- Create OAuth 2.0 credentials in Google Cloud Console
- Configure authorized redirect URIs
Active Security Features
All data transmitted between users and servers is encrypted using industry-standard SSL/TLS protocols
Configured at infrastructure level
Enterprise-grade authentication system with encrypted credentials and session management
Managed by Base44 platform
Full compliance with EU General Data Protection Regulation for user privacy and data handling
Privacy controls in user settings
User data is protected with access controls, encryption at rest, and regular security audits
Automatic backups enabled
All external resources loaded securely, no mixed content warnings
HTTPS-only content policy
Google Recognition Requirements
Google Sign-In Setup Instructions
To enable Google OAuth authentication, configure these settings in your Base44 dashboard under Settings → Authentication. You'll need to create OAuth credentials in Google Cloud Console first.
HTTPS/SSL Certificate
Your domain must have a valid SSL certificate installed
✓ Configure through your Base44 dashboard or domain provider
Privacy Policy Page
Comprehensive privacy policy explaining data collection, usage, and user rights
✓ ✓ Available at /PrivacyPolicy - Complies with GDPR, CCPA, and US federal regulations
Terms of Service
Clear terms and conditions for platform usage
✓ ✓ Available at /TermsAcceptance - Users must accept before accessing platform
Domain Verification
Verify domain ownership in Google Search Console
→ Action Required: Visit Google Search Console and add your domain
OAuth 2.0 Configuration
Configure Google Sign-In with proper OAuth 2.0 credentials
→ Action Required: Configure in Google Cloud Console → Credentials
Authorized Redirect URIs
Configure callback URLs for Google authentication
→ Add your domain's callback URL to Google Cloud Console
Consent Screen Configuration
Set up OAuth consent screen with app details and scopes
→ Configure in Google Cloud Console → OAuth consent screen
Data Encryption
All user data must be encrypted in transit and at rest
✓ ✓ SSL/TLS encryption active + encrypted database storage
Secure Password Storage
Passwords must be hashed and salted using industry standards
✓ ✓ Managed by Base44 authentication system
Session Security
Secure session management with timeout and token rotation
✓ ✓ Implemented via Base44 platform authentication
Register Your App in Google Cloud Console
Visit console.cloud.google.com → Create new project → Enable Google+ API
Create OAuth 2.0 Credentials
APIs & Services → Credentials → Create OAuth 2.0 Client ID
Configure Authorized Redirect URIs
Add your domain's callback URL (e.g., https://icty.app/auth/callback)
Add Credentials to Base44 Dashboard
Settings → Authentication → Enable Google provider → Paste Client ID & Secret
Verify Domain Ownership
Google Search Console → Add property → Verify domain with DNS or HTML file
Need help with security configuration or Google integration? Contact Support