Skip to content

Security

Built to keep your content and connections safe.

Security questions, disclosure reports, or compliance requests — contact us.

Encrypted connection tokens

Tokens for accounts you connect (publishing, calendar) are stored encrypted, never in plain text.

Workspace isolation

Every query is scoped to your workspace. Your sources, drafts, and analytics are never visible to other accounts.

Guarded outbound fetches

Source and media fetches run through SSRF-guarded fetchers, so the app only reaches the destinations it should.

Least-privilege integrations

Integrations request only the scopes they need, and you can disconnect them at any time from Settings.