Security

Security for production workloads

Controls teams expect when integrations touch customer and operational data.

Encryption

Data encrypted in transit and at rest. Secrets stored in an app-level vault.

Multi-tenant RBAC

Workspace permissions and tenant isolation from day one.

Audit and trace

JSON logs with traceId, tenantId, and userId on requests and flow runs.

Auth hardening

Argon2id password hashing, JWT refresh rotation, OAuth2 for connectors.

Compliance posture

Architecture designed with common enterprise control frameworks in mind. Ask for current attestation status during evaluation.

Network controls

IP allowlists, webhook signature checks, and rate limits on public endpoints.

Request the security overview

We can share architecture notes and the current compliance posture for your review.