Security
Built with security fundamentals in mind. We only claim what we actually do.
Authentication
Secure, password-based auth with email verification and session refresh.
Role-based permissions
Fine-grained permissions tied to roles — enforced in the database layer.
Tenant isolation
Every query is scoped to your organization. No cross-tenant access.
Encryption
Data encrypted in transit and at rest by our hosting infrastructure.
Audit logs
Actions that change records are logged for accountability.
Secure file access
Attachments are served through signed, access-controlled storage.
Human-controlled AI
AI does not silently change records, send messages, or make consequential decisions. Permissions and approvals govern every AI-proposed action.