Within your organization, only members of your team can access your data, and what they can see and do is determined by the role you assign them (Admin, Editor, Reviewer, or Auditor). Other customers cannot access your data under any circumstances every record is scoped to your organization and enforced on every request.

On our side, access is restricted to a small number of authorized engineers under least-privilege controls, used only for support, maintenance, and incident response. Sensitive credentials such as passwords are stored using industry-standard one-way hashing — even our own team cannot read them.

We use a small number of subprocessors to operate the service. Each one receives only the limited data needed for its specific function.