Security & data governance.
How your proprietary catalogues, customer documents, and outreach credentials are safeguarded on edge infrastructure.
Strict Tenant Isolation
Every organization record carries an immutable workspace identifier. Server routes enforce cryptographic session membership on every query. Cross-workspace leakage is mathematically prevented.
Secure Session Architecture
Credentials use PBKDF2-SHA256 password hashing. Sessions rely on cryptographically random tokens stored hashed, delivered over Secure HttpOnly cookies with SameSite protections.
End-to-End Encryption
All network traffic is encrypted via modern TLS 1.3. Rest data uses Cloudflare platform-level AES-256 encryption. Secret environment variables never enter client bundles or logs.
Stripe Payment Vaulting
Payments are processed exclusively through Stripe. We store secure subscription IDs and entitlement counters — never credit card numbers — and verify every webhook signature with HMAC-SHA256.
Outreach Deliverability Guardrails
Every outgoing message pass checks unsubscribes, manual opt-outs, hard bounces, and plan quota allowances. RFC 8058 One-Click unsubscribe headers are embedded in all communications.
Data Sovereignty & Deletion Rights
Export or permanently purge your business catalogues and records at any time. Account deletion immediately cascades across all solely-owned workspaces, documents, and derived intelligence.