Trust & Security
Security built into every layer
Plain-English controls that protect your data, your customers and your spend.
Role-based access control
Six roles with centralized checks and privilege-escalation guards.
Workspace permissions
Owners, managers and members get exactly the access they need.
CSRF protection
Double-submit token enforcement on state-changing requests.
Hardened OAuth
Every connection uses PKCE with encrypted, single-use state.
Encrypted tokens
All credentials are sealed with AES-256-GCM and key rotation.
Rate limiting
Tiered, Redis-backed limits protect every endpoint.
Verified payments
PayPal webhooks are signature-validated before processing.
Per-request CSP
A nonce-based Content-Security-Policy is issued on every request.
Data separation
Every record is scoped per user, enforced at the database layer.
Built for businesses that take data seriously
Start free - your connections are encrypted from the first click.