Security

Draft: this page is a general placeholder pending review by legal counsel. It does not create contractual obligations. For questions, email [email protected].

Security is designed into the platform from the start. Platform capabilities include:

• Role-based access control and full audit trails
• Field-level encryption for sensitive data
• Tenant isolation between brands
• OAuth scopes, rate limiting and idempotent API requests
• Cloud-native deployment with health probes and monitoring

Reporting a vulnerability

If you believe you have found a security issue, please email [email protected] with details. Please do not publicly disclose it until we have had a chance to respond.