Security & data
Multi-tenant isolation is enforced by PostgreSQL Row Level Security, with a non-privileged application role.
Email passwords and tokens are encrypted at rest (AES-256-GCM). Login uses JWT with optional 2FA (TOTP).
Multi-tenant isolation is enforced by PostgreSQL Row Level Security, with a non-privileged application role.
Email passwords and tokens are encrypted at rest (AES-256-GCM). Login uses JWT with optional 2FA (TOTP).