Security FAQ
How your data is protected — quick answers for reviewers and buyers.
Is my data isolated from other tenants?
Yes. Every user-scoped table enforces row-level security. Server functions run under your authenticated identity — the query engine itself refuses to return anyone else's rows.
Where are OAuth tokens stored?
In a service-role-only table. Application code and other tenants cannot read them.
Do you train AI models on my data?
We do not send your private data to third-party model providers for training. AI calls flow through a managed gateway with input sanitization and secret redaction.
Is the site encrypted?
Traffic uses TLS 1.3 with HSTS. Data at rest is encrypted by the managed database. See /security for the full trust page.