Security and data isolation
How one workspace's information stays that workspace's information.
Isolation between workspaces
- Each workspace is resolved from its own subdomain before anything else happens, and every query is scoped to it.
- A resource from another workspace answers exactly as if it did not exist.
Access
- Passwords hashed with bcrypt; optional two-factor authentication.
- Public forms are protected by submission limits, automated-submission detection and a refusal of links and HTML.
Audit
- An append-only audit log covering state changes, permission changes and denied access.
- Deleted records are marked, not erased, so history stays reconstructable.