Enterprise-Grade Security
Your data security is our top priority. Built with security-first architecture from day one.
Password Protection
Passwords are stored as Argon2id hashes — never in readable form — with breach-corpus screening at registration.
Encrypted Secrets
Third-party credentials are encrypted at rest and never returned in readable form through any API or admin view.
Role-Based Access Control
Fine-grained permissions ensure users only access what they need. Workspace isolation is enforced on every request.
Audit Logging
Administrative and security-relevant actions are logged with actor, timestamp, and metadata for review.
Two-Factor Authentication
TOTP-based 2FA is available for all accounts and can be required for administrators by policy.
Verified Webhooks
Inbound webhooks are verified with HMAC signatures; outbound sends use idempotency keys to prevent duplicates.
Session Control
Short-lived tokens with revocable sessions. Review and revoke active sessions at any time.
Responsible Disclosure
Report vulnerabilities to our security contact below. No security certification is claimed.
Security Contact
Found a security issue? Report it to security@chatalis.com