Skip to content

Security

Tenancy is a security boundary.

Organization and Brand scope is enforced server-side. Platform-admin access is separate from org roles. We do not claim certifications we have not completed.

  • Explicit tenant scoping on queries and jobs
  • Hostname-based Brand and surface resolution
  • Cookie sessions and CSRF as first-class auth
  • Platform capabilities gated by platform role, not org ownership alone