Security & privacy

Built to protect your work.

We keep the sensitive parts on our servers, never hand secrets to your browser, and ask for your approval before anything risky happens.

Secrets stay server-side

Payment keys, provider credentials, and admin access live only on our servers — they never reach your browser.

Assisted and outbound actions are shown to you first and need owner approval, with an audit trail of what happened.

Records are scoped to your organization with role-based access and clear retention — nothing is mixed across accounts.