Security
Your clients trust you with their logins. We take that literally.
How we protect participant links, secure fields and run history. No badges we haven’t earned — just what we do.
Encrypted in transit and at rest
TLS everywhere; data encrypted at rest. Secure fields encrypted again with per-workspace keys.
Magic links that expire
Private, unguessable, time-limited and revocable. A new link invalidates the old one.
Secure fields
Passwords and keys shown only to the people you name, and every view is logged.
Roles and access
Owner, admin, editor and viewer. Two-factor sign-in, enforceable per workspace.
Audit log
Every publish, replay, link and export is recorded. Export on Scale.
Retention you control
Run history kept while active and deleted 90 days after cancellation.
Responsible disclosure
Report issues to [email protected]. We reply within two working days.