Security and GDPR

Active measures

• Organization isolation on every query.
• Encrypted secrets at rest (Oblio, certificates) with AES-256-GCM.
• Temporary signed URLs for all files.
• Rate limiting on login, uploads and sensitive actions.
• Security headers: HSTS, X-Frame-Options, Referrer-Policy.
• Audit log for important actions.

GDPR

We follow GDPR principles: we only collect the data we need, we use only essential cookies (authentication, language, theme), with no tracking or ads. See the Privacy Policy.

Audit log

In Security you see the latest relevant events in your organization (who, what, when).