Security Controls, Described Honestly
This page describes what is actually implemented in the platform today: not a certification, and not a promise about controls that do not yet exist.
Your Data Stays Yours
Each organisation's data is completely separated at the database level, not just hidden behind a login. One agency can never see another's work, by design.
Every record (clients, brands, campaigns, assets, revisions, approvals, and connected accounts) is scoped to its organisation and workspace, enforced on every request, not just filtered in the interface.
Controls built into the platform
Encrypted credentials
AvailableYour social account credentials are encrypted when stored and never sent back to the browser, so there is nothing useful to read even if a request were intercepted.
Role-based access control
AvailablePublishing, approving, connecting accounts and managing a workspace each require a specific role, re-checked on the server for every sensitive action.
Approval gating
AvailableNo scheduled or immediate publish can proceed without a server-verified approval on the exact content revision being sent - verified directly on the server before sending.
Audit history
AvailableConnection, approval and publishing actions are written to an audit trail as they happen, independent of what the interface displays.
Your social logins are stored securely
AvailableConnected account credentials are retrieved from encrypted storage only when needed for each action and are never kept accessible in a way that could be reused if exposed.
No silent overwrites
AvailableWhen multiple team members work on the same content, version checks prevent one person's updates from silently overwriting another's.
Image-fetch protection
AvailableWhen publishing pulls a remote image, the destination address is validated and pinned before the connection is made, guarding against a type of attack that could redirect image links to unsafe destinations.
Responsible disclosure
If you believe you've found a security issue, contact [email protected] directly.