Dedicated installation
Your own code and database on your server and subdomain, with a backup before every update.
Your data, on your server
Security starts by not sharing infrastructure: each client has its own installation and database.
Isolation and permissions
Every record belongs to an organization and every action goes through permission policies, with automated isolation tests.
Protected access
Modern password hashing, rate limiting, two-step verification with recovery codes and secure sessions.
Audit log
Sign-ins, failed attempts, permission changes, tokens and webhooks are logged with IP and date.
Private files
Attachments are stored outside the public web and only served to people who can see the task; their real type is checked.
AI under control
The assistant only queries what the person can see, never receives attachments and changes nothing without confirmation.