Security and Compliance

Public summary of safeguards connected to the privacy policy, terms, and DPA.

Last updated: May 9, 2026

Safeguards

Tenant isolation and role-based access controls.
Authentication controls, optional MFA support, and session security.
Audit logging, monitoring, backup controls, and incident response processes.
Least-privilege internal access for support and maintenance.

Shared Responsibility

Customers are responsible for user access, role design, endpoint security, approved integrations, exported data, internal notices, and lawful business use of tenant data.

Operational Security and Incident Reporting

Use least-privilege internal access for support and maintenance.
Review high-risk administrative actions, database operations, integrations, and exported reports.
Monitor login events, permission changes, tenant administration, file uploads, and critical workflow activity.
Report suspected vulnerabilities, unauthorized access, or data incidents promptly to the designated security contact.