Security, by default.

Built for revenue teams who can't afford a leaky outbound stack.

Encrypted at rest

API keys and SMTP credentials are encrypted with AES-256-GCM before they hit the database.

Bring your own keys

Use your own OpenAI, Gemini, Resend, and SMTP credentials. We never proxy your keys.

Audit log

Every admin and security-relevant action is recorded — who, what, when, where.

Tenant isolation

All queries are scoped to your organization at the data layer. No cross-tenant reads.

Least-privilege roles

Five role tiers from Viewer to Owner. System-level Super Admin is gated to a single email.

DPA on request

Available on the Scale plan. SOC 2 Type II in progress.