Security
Security model
Security
Enterprise-grade security by architecture — not as an afterthought.
Principles
- Company-scoped data plane — strict tenant isolation
- Default deny — Policy Engine before any automated action
- Credential Vault — secrets never in source code
- Integration Sandbox — uncertified connectors are gated
- Audit trails — event-sourced record of material actions
Plugin Security
Plugins and connectors:
- Run in sandbox until certified
- Declare explicit permissions in manifest
- Store credentials in vault
- Pass security validation framework
See Plugin Development.
Authentication
Bearer JWT for API access. Enterprise SSO (SAML/OIDC) on Enterprise plans.
See Authentication.
Reporting
Report security concerns via Contact — do not open public issues for vulnerabilities.