Security and privacy

Partner, Google and Slack credentials are encrypted at rest with AES-GCM and key rotation.
Every query is scoped to your organization; an automated test fails the build if a table holding organization data is not registered as tenant data.
Content Security Policy with per-request nonces, secure cookies, rate limits on sign-in links, the SDK ingest API and the free tools.
Staff access is limited to an allowlist, every staff page view is logged, and viewing an organization is read-only and recorded in that organization's audit log.
Export everything or delete your organization from Settings, Data and privacy.
We never send credentials to AI models, and we do not use your data to train them.