Security, in plain language
How your company's data is isolated, protected, and always yours. Questions or a disclosure to report? Contact your account owner or support.
Every workspace is a separate tenant. Each API query is scoped to your organization; cross-tenant access is rejected at the authorization layer, and platform operators are architecturally excluded from workspace data APIs.
Passwords are stored as bcrypt hashes and never logged. Sessions use signed tokens with server-side invalidation on password change or forced logout. Optional two-factor authentication is available to every user, and you can sign in with your Google or Microsoft account.
Platform administrators use role-based access with per-capability permissions, optional IP allowlisting, and TOTP two-factor authentication that can be enforced organization-wide. Every operator action on tenant data is recorded in an audit log, and support impersonation is read-only by default.
Owners can export their full workspace as JSON at any time, on every plan, and every member can export their own data from their profile. Account and workspace deletion are self-serve: a 30-day grace window, then an irreversible purge. A tenant-facing audit log (Business plan) records administrative actions inside your workspace.
Card details never touch our servers — billing is processed by Razorpay, a PCI-DSS-compliant payment provider. We store only subscription state and invoices.
Databases are backed up daily with rotation. Deployments are containerized with health checks and graceful shutdown so updates do not drop in-flight requests.