Security and Data Protection on MamãoFy

What does full LGPD compliance mean on MamãoFy?

Full LGPD compliance on MamãoFy means the entire platform was designed from the ground up to strictly meet Brazil's General Data Protection Law.

This includes minimal collection of necessary information and explicit user consent.

Rights to access, correct, and delete data are guaranteed, along with immediate notifications in case of incidents.

Producers' data, such as financial and student information, are handled with clear legal basis and never shared without authorization.

In practice, this allows schools and online content creators to operate with peace of mind, avoiding fines that can reach 2% of annual revenue.

For example, when registering a new student, the system requests only essential data and stores consents in an auditable manner.

According to the National Data Protection Authority (ANPD), platforms that implement controls like those of MamãoFy significantly reduce leak risks and increase user trust.

How does 2FA authentication with Google Authenticator increase security?

Two-factor authentication (2FA) adds an extra layer of protection beyond the traditional password.

It requires a code generated by an app like Google Authenticator.

On MamãoFy, this prevents attackers from accessing accounts even if they obtain the password through phishing or leaks on other sites.

The process is simple: after activation, each login requires the temporary six-digit code that changes every 30 seconds.

This is especially important for producers managing sensitive data from hundreds of students.

Companies adopting 2FA report up to a 99% drop in compromised credential attacks.

MamãoFy strongly recommends that all users activate this feature.

According to the official Google Authenticator documentation, this TOTP-based technology is an industry standard.

Why is data encryption at rest and in transit fundamental?

Encryption protects sensitive data both when stored on servers (at rest) and during transmission between the user's browser and the platform (in transit).

On MamãoFy, advanced algorithms like AES-256 are automatically applied to information such as passwords, payment data, and student records.

This makes the data unreadable to anyone without the correct keys.

Even in case of physical server access or network traffic interception, the data remains protected.

A practical example: when processing an enrollment, credit card details are encrypted before being sent and never stored in plain text.

Security studies show that proper encryption reduces the impact of data breaches by more than 80%.

MamãoFy also uses TLS 1.3 protocols for all connections.

This technical protection is complemented by strict internal key management policies, regularly audited.

Consult the AWS security documentation for equivalent standards.

What are the benefits of Audit Log and continuous monitoring?

The Audit Log records all actions performed on the platform, from logins to course changes or student data exports.

It allows tracking exactly who did what and when.

Combined with automatic monitoring of suspicious activities, the system detects abnormal patterns such as accesses from unusual locations or repeated login attempts.

Rate Limiting complements this by limiting the number of authentication attempts, blocking brute-force attacks before they cause damage.

For a producer, this means full visibility into account usage and the ability to respond quickly to any irregularity.

In a practical example, if a login occurs from another country, the system can require additional verification or temporarily block access.

These tools transform reactive security into proactive security, helping meet LGPD audit requirements.

According to ANPD reports, companies with detailed logs and monitoring reduce incident response time by up to 60%.

How to activate 2FA on MamãoFy step by step?

Activating 2FA on MamãoFy is a quick process that takes less than two minutes.

First, access Settings and then the Security section.

Click the “Activate 2FA” button to start the setup.

The system will display a QR code that must be scanned with the Google Authenticator app installed on your phone.

After scanning, enter the six-digit verification code generated by the app to confirm activation.

Done: from that moment on, every login will require the code in addition to the password.

It is recommended to save the provided recovery codes in a safe place in case you lose access to your phone.

This activation is especially recommended for all producers.