Security
Security is a product requirement, not a page
Tenant isolation, encrypted connector secrets, webhook signatures, RBAC, audit logs. Designed with GDPR principles — not a certification claim.
Controls in this build
Sessions via Better Auth. Passwords hashed by Better Auth (scrypt/argon as configured). Connector tokens are never logged. Webhook signatures are verified before events enter the ledger. Every query is tenant-scoped through membership. RBAC roles: owner, admin, analyst, operator, viewer.
We do not store card data. PayPal is the payment processor. We do not claim SOC 2, ISO, or GDPR certification. We design with GDPR principles: minimization, export, deletion, retention.
Autopilot safety
Write access is never on by default. Global, tenant and connector kill switches exist. Daily action caps and money caps apply. Large refunds, payout disputes and financial transfers are never fully autonomous.