Security, stated plainly.
What we do, and what we have not done yet.
Every customer is separated
Each workspace has its own boundary in the database and every request is checked against it.
Sign-in you control
SAML single sign-on, SCIM provisioning and two-factor authentication. Your company can require two-factor sign-in for everyone.
Least privilege
Roles control who can read, change and approve. API keys are scoped to the routes they need.
A record of who did what
An audit log covers sign-ins, approvals and settings changes. Enterprise can export it.
Protected secrets and signed events
Integration secrets are encrypted at rest. Webhooks and Slack requests are verified by signature.
Backups
Encrypted database backups run on a schedule, with a documented restore procedure.
Not yet
We have not completed a SOC 2 audit, and we will not claim one before we have it. Data is hosted in the United States today; regional hosting is planned. If your review needs more, ask us.
See it with your own tickets.
Free for up to three agents. No card needed. Every new workspace gets 14 days of Business.