Security built into every layer
Encryption, isolation, audit logging, and compliance controls embedded throughout the platform. Not bolted on as an afterthought.
Encryption
TLS 1.3 for data in transit. AES-256 encryption for data at rest. Fernet + PBKDF2 encrypted credential vault for all API keys and OAuth tokens.
Tenant Isolation
Per-tenant SQLite databases with contextvars-based scoping. No data leakage between tenants. Each tenant gets isolated storage, credentials, and configuration.
Authentication & Authorization
API key authentication with per-key scoping and rate limits. OAuth2 support for Google, Microsoft, and Zoho. Key rotation without downtime.
Audit Logging
Every API call, pipeline execution, data access, and admin action is logged with timestamps, user context, and trace IDs. Full decision traceability.
Infrastructure Security
VPS deployment with hardened Linux. SSH key-only access. Firewall rules. No secrets in code -- all credentials via environment variables.
Incident Response
Defined incident severity levels. Automated alerting. Documented response procedures with escalation paths and customer notification timelines.
Compliance
GDPR
Data processing agreements, right to erasure, consent tracking, data minimization
CAN-SPAM
Unsubscribe handling, sender identification, physical address inclusion
CCPA
Data access requests, deletion rights, opt-out mechanisms
SOC 2 Type II
Security, availability, processing integrity, confidentiality, privacy controls
Security Practices
Frequently Asked Questions
Everything you need to know about our platform.
Still have questions?
Our team can walk you through the pipeline, pricing, and your use case.