Data Protection

Learn how we protect your data and ensure security.

Encryption in Transit

All API requests are encrypted in transit using HTTPS/TLS. This ensures that data cannot be intercepted or modified during transmission.

API Key Security

API keys are never stored in plaintext. They are hashed using secure cryptographic functions.

  • Keys are hashed before storage
  • Only the key prefix is stored for identification
  • Full keys are only shown once when created

Data Isolation

All data is tenant-scoped. Each tenant can only access their own products, plans, licenses, and users. Multi-tenancy is enforced at the database level.