Security
Security is a default, not a feature.
Tenant isolation
Every table enforces row-level security; cross-tenant access is impossible by construction.
Data in transit
All traffic is served over HTTPS with HSTS preloading.
Webhooks
Outgoing webhooks are HMAC-SHA256 signed and retried with backoff.
Auditing
Every privileged admin action is recorded in an append-only audit log.