Security
Tenancy is a security boundary.
Organization and Brand scope is enforced server-side. Platform-admin access is separate from org roles. We do not claim certifications we have not completed.
- Explicit tenant scoping on queries and jobs
- Hostname-based Brand and surface resolution
- Cookie sessions and CSRF as first-class auth
- Platform capabilities gated by platform role, not org ownership alone