Your channels stay yours
Access tokens are sealed in a vault, every organization is isolated and every important action is recorded.
How we protect access
Sealed credentials
Each organization's tokens are encrypted with its own key. They are never returned to the browser and never written to logs.
Tenant isolation
Every data access is scoped to the organization it belongs to.
Append only audit log
Who changed what, kept as a record that cannot be edited.
Emergency stop
Pause publishing for an organization in one action.
Revocable keys
A key acts with the role of the member who made it, is shown once, and can be revoked at any time.
Data deletion
A documented path to request deletion of your data.
How to request deletion
Credentials you can never read back
Once a channel is connected its token is sealed. Not even the app can show it to you again, which also means it cannot leak from the app.
- Envelope encryption per organization
- Never returned, never logged
What we do not claim
No certification we do not hold
We do not claim any certification we do not hold. We describe what we do and let you judge it.
Found a problem?
Write to us with what you found and a person reads it.
Contact support